Kentucky Consumer Data Protection Act - Profiling Provisions
Effective date
Penalty
$7,500 per civil violation. Permanent 30-day cure period with no sunset (one of the most business-friendly enforcement provisions). AG-only enforcement. No p…
Obligations mapped
15 obligations
Overview
Grants Kentucky consumers the right to opt out of profiling for decisions producing legal or significant effects. Virginia-model structure. Companies already compliant with VA, TX, or IN privacy laws should have minimal additional burden. Data protection impact assessments effective June 1, 2026 (delayed from the main January 1, 2026 effective date).
This is a privacy law with automated decision-making provisions.
See if this regulation applies to your company with the free exposure scan.
Who this applies to
This regulation applies to the following roles:
- Deployers and users of covered AI systems and tools
- Organizations operating in Kentucky
This regulation applies to companies that use or deploy AI tools and systems built by other vendors. If your company uses AI-powered products in the areas listed below, this regulation may apply to you.
Section 3(2)(e) · Section 4(3), 4(4), 4(5) and related sections
AI categories covered
- Consumer-facing AI
- Automated decision-making
Specific AI use cases:
- Customer profiling and segmentation
What this requires you to do
15 obligations identified from statutory analysis.
Section 3(2)(e)
Section 3(2)(e), Section 4(4)
Section 3(2)(e)
Section 3(3), 3(4)
Section 5(2)
Regulation summaries are simplified for readability and may not capture every nuance of the underlying statute. Verify important details against primary sources linked on this page.
Enforcement and penalties
$7,500 per civil violation. Permanent 30-day cure period with no sunset (one of the most business-friendly enforcement provisions). AG-only enforcement. No private right of action. No universal opt-out mechanism requirement. Penalties deposited into a consumer privacy fund for further enforcement.
Penalty amounts are based on statutory text and may be subject to adjustment, judicial interpretation, or enforcement discretion.
Kentucky AI regulation guide lists every tracked rule for this jurisdiction with timelines and obligation tallies.
Regulation summaries are simplified for readability and may not capture every nuance of the underlying statute. Verify important details against primary sources linked on this page.