United States of America: Act amending Kentucky Revised Statutes on data privacy including cybersecurity regulation enters into force
Description
Act amending Kentucky Revised Statutes on data privacy including cybersecurity regulation enters into force
On 1 July 2027, the Act amending Kentucky Revised Statutes on data privacy (HB 692) enters into force. The Act amends KRS 367.3617 to require controllers to establish, implement, and maintain reasonable administrative, technical, and physical data security practices to protect the confidentiality, integrity, and accessibility of personal data. The data security practices must be appropriate to the volume and nature of the personal data at issue.
Original sourceScope
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
technological consumer goods
Implementation Level
subnational
Government Branch
executive
Government Body
central government
Complete timeline of this policy change
Hide details
2026-02-23
under deliberation
2026-03-13
under deliberation
2026-03-31
adopted
2026-04-13
adopted