United States of America: Bill amending Kentucky Revised Statutes on data privacy including cybersecurity regulation was passed by Kentucky House of Representatives

On 13 March 2026, the Kentucky House of Representatives passed the Bill amending Kentucky Revised Statutes on data privacy (HB 692). The Bill would amend KRS 367.3617 to require controllers to establish, implement, and maintain reasonable administrative, technical, and physical data security practices to protect the confidentiality, integrity, and accessibility of personal data. The data security practices would be required to be appropriate to the volume and nature of the personal data at issue.