Kentucky Consumer Data Protection Act, de-identified data duties (2024 Ky. Acts ch. 72 (HB 15), sec. 7 (codified in KRS 367.3611 to 367.3629))
Kentucky imposes the three de-identification duties on the holder rather than in the definition.
Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text
In the source's own words
“in possession of de-identified data shall: (a) Take reasonable measures to ensure the data cannot be associated with a natural person; (b) Publicly commit to maintaining and using de-identified data without attempting to re-identify the data; and (c) Contractually obligate any recipients of the de-identified data to comply with all provisions of Sections 1 to 10 of this Act.”
Where it was read
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide