United States of America: Act amending Kentucky Revised Statutes on data privacy including cybersecurity regulation was signed into law by Governor of Kentucky

On 13 April 2026, the Governor of Kentucky signed the Act amending Kentucky Revised Statutes on data privacy (HB 692) into law. The Act amends KRS 367.3617 to require controllers to establish, implement, and maintain reasonable administrative, technical, and physical data security practices to protect the confidentiality, integrity, and accessibility of personal data. The data security practices must be appropriate to the volume and nature of the personal data at issue. The Act will take effect on 1 July 2027.