AN ACT relating to consumer data privacy and making an appropriation therefor.

Create new sections of KRS Chapter 367 to establish consumer rights relating to personal data; define terms; exempt certain persons or entities from the statutory provisions of this Act; establish certain consumer rights relating to personal data, including the rights to confirm whether data is being processed, to correct any inaccuracies in the consumer's personal data, to delete personal data provided by the consumer, to obtain a copy of the consumer's personal data that was previously provided, and to opt out of targeted advertising, the sale of data, or profiling of the consumer; set forth requirements for persons or entities that control and process consumer data; establish that the Attorney General has exclusive authority to enforce the consumer data privacy rights; create a consumer privacy fund to be administered by the Office of the Attorney General; EFFECTIVE January 1, 2026.