Kentucky General Assembly approves comprehensive privacy bill

The Kentucky House voted 94-0 on concurrence and final passage of House Bill 15, a proposed comprehensive privacy law. The bill, modeled after Virginia's comprehensive law, contains requirements for data protection impact assessments, processing deidentified or pseudonymous data, user opt outs for targeted advertising and data sales, and a 30-day cure provision. If enacted, the bill will take effect 1 Jan. 2026. Editor's note: The IAPP's Joe Duball reported on Kentucky's efforts to pass a comprehensive privacy law.