The Kentucky Consumer Data Protection Act grants Kentucky residents rights to access, correct, delete, and obtain portable copies of their personal data, and to opt out of data sales, targeted advertising, and profiling. Controllers must provide transparent privacy notices, limit data collection to what is adequate and relevant, obtain consent for processing sensitive data, and conduct data protection assessments for targeted advertising, profiling, and processing activities that present heightened risk. The law applies to entities processing personal data of 100,000 or more Kentucky residents, or 25,000 or more residents while deriving over 50 percent of gross revenue from data sales.
ConductAtlas maps governance language to potentially relevant regulatory frameworks. Regulatory applicability and enforceability may vary by jurisdiction, enforcement context, and individual circumstances. This page is informational and does not constitute legal advice. Methodology
Showing 30 of 5443 provisions. View all →
Get alerted when platforms change their policies — including -relevant provisions.
Subscribe to Monitor — $19/moConductAtlas tracks -relevant provisions across 100 platforms. Each platform's specific provisions are classified by severity and mapped to requirements.
ConductAtlas captures policy documents daily, classifies provisions by regulatory framework, and flags changes that affect obligations. Every change is archived with cryptographic verification.