Signal · Kentucky Live
What does Kentucky require
right now?
The current bills, deadlines, enforcement patterns, and what your district should actually be doing about it.
curated by Loop + Ledger
Laws tracked
2
In this state
Enacted
1
On the books
In motion
1
Actively moving
Most recently enacted
What just became law?
Enacted
KY HB 15 (2024) / KRS 367.390 et seq.Kentucky Consumer Data Protection Act (KCDPA)
Applies to businesses processing data of 100,000+ Kentucky residents or 25,000+ deriving 50%+ revenue from data sales. Consumer rights: access, correct, delete, portability, opt-out of targeted advertising, data sales, and significant-effect profiling. Opt-in consent required for sensitive data. Data protection impact assessments for certain processing activities. AG has exclusive enforcement authority; 30-day cure period; $7,500 per violation.
— Kentucky's privacy law activated Jan 1, 2026 — any platform serving KY districts needs opt-out mechanisms, consent workflows for sensitive data, and a data processing agreement in place.
Effective: Jan 01, 2026Source →
Watch list
What's coming up?
No upcoming deadlines on the tracker.
In motion
What's active right now?
ACTIVE
KY HB 15Kentucky Consumer Data Protection Act (KCDPA)
Eff. Jan 1, 2026. Comprehensive consumer data privacy. $7,500/violation, 30-day cure period. AG enforcement. Mirrors VCDPA.
— EdTech vendors serving KY districts carry compliance obligation.
Book a working session
A 20-minute working session on Kentucky compliance.
See clearly.
Act strategically.
Protect what matters.