On 11 February 2026, the Bill amending the Kentucky Consumer Privacy Act (KRS 367.3611 to 367.3629) (HB 633) was introduced to the Kentucky House of Representatives. The Bill applies to covered online services that conduct business in Kentucky, determine the purposes and means of processing consumers' personal data, and annually process personal data of at least 100'000 consumers or derive at least 50% of annual gross revenue from the sale or sharing of personal data. It defines covered minors as users that a covered online service knows or should have known, based on objective knowledge or circumstances, to be under 18 years. The Bill requires covered online services to configure all default privacy settings provided to a covered minor to the highest level of privacy. It requires covered online services to disable by default all interaction counts, including counts of reactions and comments on all of the covered minor's media. The Bill prohibits covered online services from, by default, using an algorithmic recommendation system to recommend to any known adult user that they connect to a covered minor as a friend, follower, or contact or follow a covered minor's media unless accounts were connected prior to the recommendation. It prohibits covered online services from, by default, displaying a covered minor's friends, followers, or contacts, enabling search engine indexing of a covered minor's account profile and media, or displaying the location of any covered minor to any other user unless the covered minor has expressly chosen to share location. The Bill prohibits covered online services from, by default, sending push notifications to any covered minor. It requires covered online services to establish mechanisms for covered minors and parents to report harms. The Bill requires covered online services to provide a tool giving a covered minor the option to block specific users.
Original source