AN ACT relating to consumer data privacy.

Creates new sections of KRS Chapter 367 to establish consumer rights relating to personal data, including the rights to confirm whether data is being processed, to delete personal data provided by the consumer, to obtain a copy of the consumer's personal data that was previously provided, and to opt out of targeted advertising and the sale of data; define terms; set forth the types of data and the persons or entities to which the statutory provisions do and do not apply; set forth requirements for persons or entities that control and process consumer data; establish that the Attorney General has exclusive authority to enforce the consumer data privacy rights; create a consumer privacy fund in the State Treasury to be administered by the Office of the Attorney General; EFFECTIVE January 1, 2026.