United States of America: Bill amending Kentucky Revised Statutes on data privacy including cybersecurity regulation was introduced to Kentucky House of Representatives

On 23 February 2026, the Bill amending Kentucky Revised Statutes on data privacy (HB 692) was introduced to the House of Representatives of the General Assembly of the Commonwealth of Kentucky. The Bill would amend KRS 367.3617 to require controllers to establish, implement, and maintain reasonable administrative, technical, and physical data security practices to protect the confidentiality, integrity, and accessibility of personal data. The data security practices would be required to be appropriate to the volume and nature of the personal data at issue.