United States of America: Bill amending Kentucky Consumer Privacy Act (HB 633) including age verification requirement was introduced to House of Representatives

On 11 February 2026, the Bill amending the Kentucky Consumer Privacy Act (KRS 367.3611 to 367.3629) (HB 633) was introduced to the Kentucky House of Representatives. The Bill applies to covered online services that conduct business in Kentucky, determine the purposes and means of processing consumers' personal data, and annually process personal data of at least 100'000 consumers or derive at least 50% of annual gross revenue from the sale or sharing of personal data. It defines covered minors as users that a covered online service knows or should have known, based on objective knowledge or circumstances, to be under 18 years. The Bill defines "knows to be a child" or "knows to be a minor" as having actual knowledge that a user is a child under 13 years or a minor under 18 years, as applicable. It establishes that actual knowledge means all information and inferences known to a covered online service relating to the age of an individual, including self-identified age and any age the covered online service has attributed to or associated with the individual for any purpose, including marketing, advertising, or product development. The Bill requires that if a covered online service's classification of an individual for purposes of marketing or advertising is inconsistent with the individual's self-identified age, the covered online service shall disregard self-identified age. It prohibits covered online services from being required to collect the personal data of a user to comply with the requirements. The Bill specifies that a covered online service that collects personal data of a user for age verification shall not use personal data for other purposes and shall delete personal data after use for age verification.