KCDPA takes effect

Kentucky's Attorney General privacy page lists January 1, 2026 as the effective date and describes consumer rights to confirm, access, delete, correct, obtain, and opt out.

Official source row

State: Kentucky (KY)
Law or platform: Kentucky Consumer Data Protection Act (KCDPA)
Status: In effect
Effective date: 2026-01-01 · KCDPA takes effect
Enforcement: Kentucky Attorney General.
Last checked: 2026-06-29

Source of record: Kentucky Attorney General KCDPA page

Rights tracked

Delete

The Kentucky Attorney General page describes a consumer right to delete personal data provided by or obtained about the consumer.

Source: official rule page

Access

The Kentucky Attorney General page describes rights to confirm processing and access personal data.

Source: official rule page

Opt out

The Kentucky Attorney General page describes opt-out rights for targeted advertising, sale of personal data, and certain profiling.

Source: official rule page

Correct

The Kentucky Attorney General page describes a right to correct inaccuracies.

Source: official rule page

How to use this row

Use the business's consumer request process first; the Kentucky Attorney General page provides the state consumer privacy reference.

The Kentucky Attorney General page says violations can carry civil penalties of up to $7,500 per violation.

Open official source