Posts in State Consumer Privacy Protection Laws.
Kentucky and Indiana implemented new consumer data privacy laws, the KCDPA and ICDPA, effective January 1, 2026. Both laws impose requirements on businesses handling personal data and grant rights to consumers. Compliance is essential to avoid penalties, and businesses should review the guidance from the respective state Attorney Generals ...
Kentucky's Consumer Data Protection Act (KCDPA), effective January 1, 2026, grants consumers rights over their personal data and mandates compliance for businesses handling such data. Controllers must implement privacy practices, limit data collection, and provide clear privacy notices. Violations may result in enforcement by the Attorney ...
On April 4, 2024, Kentucky became the 15th state to enact a comprehensive consumer data privacy law. The Kentucky Consumer Data Protection Act (“KCDPA”) will become effective on January 1, 2026. The KCDPA creates rights for Kentucky consumers and imposes requirements on certain businesses that collect consumer data ...