KY SB15 | 2023 | Regular Session


Spectrum: Partisan Bill (Republican 6-0)
Status: Engrossed on March 15 2023 - 50% progression, died in committee
Action: 2023-03-16 - returned to Committee on Committees (H)
Pending: House Committee On Committees Committee
Text: Latest bill text (Engrossed) [PDF]


Create new sections of KRS Chapter 367 to define terms; set the parameters for applicability of this Act; define various consumer rights related to data collection; require a data controller to comply with a consumer request to exercise those rights, including confirming whether or not a controller is processing the consumer's data and providing the consumer access to his or her data, deleting his or her personal data, providing a copy of the consumer's data that he or she previously provided in a portable and usable format, opting out of targeted advertising, opting out of tracking, and opting out of the sale or sharing of his or her personal data; require controllers to establish a process for consumers to appeal a controller's refusal to act on a consumer's request to exercise a right; set forth requirements for persons or entities that control or process personal data; require persons who control data to conduct data protection impact assessments; establish that the Attorney General has exclusive authority to enforce, with the exception of a private right of action by which consumers can seek injunctive relief for specific violations if the data controller or processor received an written notice of violation from the Attorney General and failed to cure the violation within 30 days; create a consumer privacy fund in the State Treasury to be administered by the Office of the Attorney General and direct that all civil penalties collected with regard to enforcement actions be deposited in the fund; set forth that this Act supersedes and preempts all rules, regulations, codes, ordinances, and other laws adopted by a city, county, charter county, urban-county government, consolidated local government, unified local government, or local agency regarding the processing of personal data; amend KRS 367.240 to conform; allow the Act to be cited as the Kentucky Consumer Protection Data Act; EFFECTIVE January 1, 2025.

Tracking Information

Register now for our free OneVote public service or GAITS Pro trial account and you can begin tracking this and other legislation, all driven by the real-time data of the LegiScan API. Providing tools allowing you to research pending legislation, stay informed with email alerts, content feeds, and share dynamic reports. Use our new PolitiCorps to join with friends and collegaues to monitor & discuss bills through the process.

Monitor Legislation or view this same bill number from multiple sessions or take advantage of our national legislative search.


AN ACT relating to consumer data privacy.


Roll Calls

2023-03-15 - Senate - Senate: Third Reading W/scs1 sfa3 RSN# 2629 (Y: 32 N: 2 NV: 0 Abs: 3) [PASS]


2023-03-16Housereturned to Committee on Committees (H)
2023-03-16House1st reading
2023-03-16Housetaken from Committee on Committees (H)
2023-03-15Houseto Committee on Committees (H)
2023-03-15Housereceived in House
2023-03-15Senatepassed 32 -2 with Committee Substitute (1) and Floor Amendment (3)
2023-03-15Senatefloor amendments (1) and (2) withdrawn
2023-03-15Senate3rd reading
2023-03-15Senateposted for passage in the Regular Orders of the Day for Wednesday, March 15, 2023
2023-03-09Senatefloor amendment (3) filed to Committee Substitute
2023-03-02Senatefloor amendment (1) filed to Committee Substitute, floor amendment (2) filed to bill
2023-02-24Senate2nd reading, to Rules
2023-02-23Senatereported favorably, 1st reading, to Calendar with Committee Substitute (1)
2023-01-05Senateto Economic Development, Tourism, & Labor (S)
2023-01-03Senateto Committee on Committees (S)
2023-01-03Senateintroduced in Senate


Kentucky State Sources

Bill Comments