United States of America: Bill amending Kentucky Revised Statutes on data privacy including data protection regulation was introduced to Kentucky House of Representatives

On 23 February 2026, the Bill amending Kentucky Revised Statutes on data privacy (HB 692) was introduced to the House of Representatives of the General Assembly of the Commonwealth of Kentucky. The Bill would amend KRS 367.3611 to introduce two new definitions. "Automatic content recognition" would mean technology embedded or operating through a smart television or smart monitor that identifies, in real time, specific content displayed by analysing audio or video fingerprints — including content received through broadcast, cable, satellite, streaming services, or external inputs — through digital fingerprinting, watermark detection, or similar comparison techniques. "Smart monitor" would mean a digital display device integrating hardware and software to enable internet connectivity, application execution, and media content streaming independently of an external computer or media source, excluding voice assistant devices and mobile devices. The Bill would expand the definition of "sensitive data" to include automatic content recognition data as a fifth category, alongside personal data indicating racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, or citizenship or immigration status, genetic or biometric data processed to uniquely identify a natural person, personal data collected from a known child, and precise geolocation data. The Bill would also amend KRS 367.3617 to require controllers to establish secure and reliable means for consumers to submit requests to exercise consumer rights under KRS 367.3615, prohibit discrimination against consumers exercising those rights, and require controllers to provide a reasonably accessible, clear, and meaningful privacy notice disclosing categories of personal data processed, processing purposes, third-party sharing, and mechanisms for exercising consumer rights including opt-out of targeted advertising and personal data sales.