Records / Laws and rulings

Kentucky Consumer Data Protection Act, controller duties (sensitive data consent) (2024 Ky. Acts ch. 72 (HB 15), sec. 4 (codified in KRS 367.3611 to 367.3629))

Sensitive data needs the consumer's opt-in consent before processing in Kentucky.

Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text

In the source's own words
“(e) Not process sensitive data concerning a consumer without obtaining the consumer's consent”
Kentucky Consumer Data Protection Act, controller duties (sensitive data consent) (2024… | AIData.Broker