Privacy laws · Kentucky

Kentucky Consumer Data Protection Act.

Virginia-model law. Standard consumer rights and business obligations.

/ Diagnostic check ClearConsent scans your storefront for signals related to this law — consent banner state, GPC support, Do Not Sell links, privacy policy disclosures, cookies, and trackers.

/ Effective
2026-01-01
Effective date
When the law took effect or will take effect.
/ Consumers
100,000
Consumer threshold
The number of Kentucky residents whose data triggers compliance.
/ Revenue
None
Revenue threshold
Annual revenue trigger for compliance, if applicable.
01 / Key requirements

What the law requires.

  • 01Privacy notice
  • 02Right to access, correct, delete personal data
  • 03Right to data portability
  • 04Right to opt-out of sale, targeted advertising, profiling
  • 05Data protection assessments
  • 06Consent for sensitive data
02 / Enforcement

Penalties & cure period.

Penalties

Up to $7,500 per violation.

Cure period

30-day cure period

Enforcement agency

Attorney General

03 / E-commerce

What this means for
your store.

Standard Virginia-model. Standard thresholds.

Scan your store for KCDPA privacy gaps →

Run the diagnostic