Kentucky Senate Bill 15

---

Spectrum: Partisan Bill (Republican 1-0)
Status: Introduced on January 2 2024 - 25% progression, died in committee
Action: 2024-01-03 - to Economic Development, Tourism, & Labor (S)
Pending: Senate Economic Development, Tourism, & Labor Committee
Text: Latest bill text (Introduced) [PDF]

Create new sections of KRS Chapter 367 to define terms; set the parameters for applicability of this Act; define various consumer rights related to data collection; require a data controller to comply with a consumer request to exercise those rights; require controllers to establish a process for consumers to appeal a controller's refusal to act on a consumer's request to exercise a right; set forth requirements for persons or entities that control or process personal data; require persons who control data to conduct data protection impact assessments; establish that the Attorney General has exclusive authority to enforce this Act and shall provide a controller or processor 30 days' written notice identifying the specific provisions that were violated; provide that if a controller or processor does not cure a violation within 30 days, the Attorney General may initiate an action and seek damages for up to $7,500 for each violation; create a consumer privacy fund in the State Treasury to be administered by the Office of the Attorney General and direct that all civil penalties collected with regard to enforcement actions be deposited in the fund; amend KRS 367.240 to conform; provide that the Act may be cited as the Kentucky Consumer Data Protection Act; EFFECTIVE January 1, 2026.

AN ACT relating to consumer data privacy.

Sen. Whitney Westerfield [R]

Date	Chamber	Action
2024-01-03	Senate	to Economic Development, Tourism, & Labor (S)
2024-01-02	Senate	to Committee on Committees (S)
2024-01-02	Senate	introduced in Senate

Type	Source
Summary	https://apps.legislature.ky.gov/record/24RS/sb15.html
Text	https://apps.legislature.ky.gov/recorddocuments/bill/24RS/sb15/orig_bill.pdf