The Kentucky House voted 94-0 on concurrence and final passage of House Bill 15, a proposed comprehensive privacy law. The bill, modeled after Virginia's comprehensive law, contains requirements for data protection impact assessments, processing deidentified or pseudonymous data, user opt outs for targeted advertising and data sales, and a 30-day cure provision. If enacted, the bill will take effect 1 Jan. 2026. Editor's note: The IAPP's Joe Duball reported on Kentucky's efforts to pass a comprehensive privacy law.
28 March 2024
Kentucky General Assembly approves comprehensive privacy bill
Related stories
A view from DC: Double toil and trouble in Connecticut’s privacy amendment
Notes from the IAPP Canada: Taking meaningful steps to protect children online
US lawmakers find bipartisanship in opposition to UK's order on Apple encryption back door
A view from Brussels: Where does Brussels stand on sovereignty?
DAA's Self-Regulatory Principles undergoing review with eye toward leveraging IBA data with AI