The Kentucky Consumer Data Protection Act (KCDPA), which recently took effect, introduces new rights for consumers and obligations for businesses handling personal data. It grants individuals rights to access, correct, delete, and obtain copies of their data, as well as opt out of targeted advertising and data sales. Businesses must ensure transparency, limit data use, and implement security safeguards, with enforcement by the state attorney general and penalties for noncompliance.
