Lexology April 10, 2024
On April 4, 2024, the Kentucky Governor Andy Brashear signed HB 15, enacting the Kentucky Consumer Data Protection Act (“KCDPA” or the “Act”), to make Kentucky the 15th US state to adopt a comprehensive privacy law. Kentucky joins New Hampshire and New Jersey in a trifecta of states that have enacted privacy legislation in the opening months of 2024. In the days since the KCDPA’s signing, the consumer privacy stakes have been raised, with the Maryland legislature’s passage of its own privacy statute, along with the introduction of the latest federal privacy bill, which would preempt the ever-growing body of state laws.
Much like other states jockeying to enter the privacy space, the Kentucky law adheres to what has become...