United States of America: Bill amending Kentucky Consumer Privacy Act (HB 633) including data protection regulation for covered minors was introduced to House of Representatives

On 11 February 2026, the Bill amending the Kentucky Consumer Privacy Act (KRS 367.3611 to 367.3629) (HB 633) was introduced to the Kentucky House of Representatives. The Bill applies to covered online services that conduct business in Kentucky, determine the purposes and means of processing consumers' personal data, and annually process personal data of at least 100'000 consumers or derive at least 50% of annual gross revenue from the sale or sharing of personal data. It defines covered minors as users that a covered online service knows or should have known, based on objective knowledge or circumstances, to be under 18 years. The Bill requires covered online services to collect and use only the minimum amount of a covered minor's personal data necessary to provide the specific elements of an online service with which the covered minor has knowingly engaged. It mandates that collected personal data not be used for reasons other than those for which it was collected. The Bill requires covered online services to retain personal data only as long as necessary to provide the specific elements of an online service with which the covered minor has knowingly engaged. It prohibits profiling of covered minors unless profiling is necessary to provide a covered online service requested by a covered minor. The Bill requires covered online services to provide tools allowing covered minors to request deletion of account profiles, media, and personal data. It allows parents to make deletion requests on behalf of the child. The Bill requires compliance with deletion requests not later than 15 days after receiving the request. It requires covered online services to provide accessible and user-friendly tools that allow a covered minor to opt out of the use of the covered minor's personal data to select, recommend, or prioritise media in an algorithmic feed, with specified exceptions.