State Breach Law
Kentucky Data Breach Notification Law
Ky. Rev. Stat. §§ 365.720 to 365.734 • Effective 2014-07-15
Kentucky says notify affected residents without unreasonable delay. Also notify the AG.
Notification deadline: Without unreasonable delay
Enforcement: Kentucky Attorney General
Overview
Kentucky requires notification without unreasonable delay after discovering a breach affecting personal information.
Who Must Be Notified
- • Affected Kentucky residents
- • Kentucky Attorney General
- • Consumer reporting agencies (if 1,000+ affected)
Covered Data Types
Social Security number, Driver's license number, Financial account numbers
Notification Requirements
- • Written notice
- • Electronic notice permitted
Is your business exposed?
Exemptions
- • Encrypted data
- • Good faith acquisition
- • HIPAA-covered entities
Penalties
Consumer Protection Act violations, up to $10,000 per violation
If You Experience a Breach
- 1.
Notify AG and residents without delay
Official Source
https://ag.ky.gov/Is your business exposed?
Check if your company data is circulating on the dark web
Free scan • No credit card required