United States of America: Bill amending Kentucky Revised Statutes on data privacy including data protection regulation was passed by Kentucky House of Representatives

On 13 March 2026, the Kentucky House of Representatives passed the Bill amending Kentucky Revised Statutes on data privacy (HB 692). The Bill would amend KRS 367.3611 to introduce definitions of "automatic content recognition" and "smart monitor." "Automatic content recognition" would mean technology embedded or operating through a smart television or smart monitor that identifies, in real time, the specific content displayed by analysing audio or video fingerprints through digital fingerprinting, watermark detection, or similar comparison techniques. "Smart monitor" would mean a digital display device integrating hardware and software to enable internet connectivity, application execution, and media content streaming independently of an external computer or media source, excluding voice assistant devices and mobile devices. The Bill would include automatic content recognition data as a fifth category of "sensitive data" and amend KRS 367.3617 to prohibit controllers from collecting automatic content recognition data without a consumer's consent. Controllers would be required to establish secure and reliable means for consumers to submit requests to exercise consumer rights under KRS 367.3615, and would be prohibited from requiring consumers to create a new account to do so. Any contractual provision purporting to waive or limit consumer rights under KRS 367.3615 would be void and unenforceable. Controllers would be prohibited from discriminating against consumers for exercising those rights and from processing personal data in violation of laws prohibiting unlawful discrimination. Controllers would be required to provide a reasonably accessible, clear, and meaningful privacy notice disclosing categories of personal data processed, processing purposes, third-party sharing, and mechanisms for exercising consumer rights, including the right to opt out of personal data sales and targeted advertising.