Esheria Regulatory Atlas

Data protection in United States — Kentucky

Personal data, privacy, cybersecurity duties, processing, and cross-border transfers. These records come from release legal-2026.07.26-907 and link directly to stored legal text.

174 matching statutes

• United States — Kentucky

  KRS § 7A.240 Authority of board.

  1 provisions

  The board may require retirement systems or state agencies to provide information, hold public hearings, set report formats and deadlines, request audits, and use consultants with approval. Some protected information is excluded.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 77.155 Prohibited emission of air contaminants -- Basis of compliance and enforcement.

  1 provisions

  This section prohibits discharging air contaminants above applicable emission standards or in amounts that harm people or property. It also lets the air pollution control board set limits and requires enforcement to rely on approved or scientifically defensible EPA-accepted methods.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 211.575 Statewide system for stroke response and treatment.

  1 provisions

  The Department for Public Health must run a statewide stroke response and treatment system, maintain a stroke database, require hospital stroke reporting, and provide annual reporting, while protecting confidential data under HIPAA.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 15.844 Data match agreements between office and financial institutions -- Surrender of assets when parent is subject to lien -- Fee -- Financial institutions not liable.

  1 provisions

  Financial institutions must enter cooperative data-match agreements with the Attorney General and report identifying information quarterly for obligated parents with arrears; they may receive a fee capped at actual cost and are protected from liability in the specified compliance disclosures and actions.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 151.620 Legislative findings.

  1 provisions

  The General Assembly states that Kentucky should develop a system to characterize and monitor groundwater.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 7.111 Right of access to information, when.

  1 provisions

  Several Kentucky justice and corrections agencies must give access to certain criminal-history databases, but that access does not allow adding, deleting, or changing data without permission.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 213.174 Report forms -- Annual statistical report -- Public records -- Confidentiality of identity -- Communication of reporting requirements.

  1 provisions

  The cabinet must create and distribute report forms, submit an annual statistical report, share aggregated data publicly in electronic form, provide certain reports to specified agencies on request, avoid prohibited data comparisons, not keep identifying statistical information, and communicate reporting requirements t

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 7A.180 Definitions for KRS 7A.180 to 7A.190.

  1 provisions

  This section defines key terms used in KRS 7A.180 to 7A.190.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 218A.278 Pilot program to analyze outcomes and effectiveness of substance abuse treatment programs -- Definitions for section.

  1 provisions

  This section defines key terms and directs the Cabinet for Health and Family Services and the Office of Drug Control Policy to run a pilot program, use specified data sources, and issue a joint report by December 31, 2016.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 350.062 Data included in permit application -- Contemporaneous reclamation -- Subsoil augmentation -- Cabinet to compile hydrologic data -- Abandoned land projects classified as government financed construction.

  1 provisions

  This section lets permit applicants use and submit hydrologic and related site data, requires the cabinet to compile and provide background hydrologic information, and sets rules for reclamation-related waivers, subsoil augmentation, and abandoned mine land project treatment.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 211.689 Agencies receiving state funds for home visitation services.

  1 provisions

  Agencies receiving state funds for home visitation services must meet the program definition, show they are part of a coordinated care system, and report data to the state data system in the required format.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 393A.820 Security of information.

  1 provisions

  The administrator and related agents must handle confidential information securely and maintain safeguards, a security plan, employee training, and secure return or destruction when the information is no longer needed.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 164.372 Annual report on student discipline -- Exemption request procedure.

  1 provisions

  Institutions must publish a student-discipline report on a schedule and send it to the Interim Joint Committee on Education. If certain data points cannot be adequately de-identified, the institution may have to seek an exemption from the Attorney General and label excluded data points in the public report.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 311A.190 Information furnished to board by providers and program -- Patient care record report form -- Annual reports -- Confidentiality -- Report to medical facility, ambulance provider, and patient -- Records -- Disclosure and admissibility of data and records -- Cabinet access to data.

  1 provisions

  Ambulance and related providers must collect, report, and protect patient care record data, while the board must publish an annual report and the Cabinet gets access to the board’s data.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 214.375 Definitions -- Kentucky Parkinson's Disease Research Registry -- Kentucky Parkinson's Disease Research Registry Advisory Committee -- Duties of the cabinet -- Provider reporting requirements -- Data collection -- Reports.

  1 provisions

  This section creates a Parkinson’s disease research registry, requires the cabinet to run it, and sets reporting, confidentiality, and annual update duties.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 218A.245 Reciprocal agreements or contracts with other states, jurisdictions, counties, or political subdivisions or with an administering organization to share prescription drug monitoring information. (Effective until July 15, 2026)

  1 provisions

  The health cabinet secretary may make sharing agreements for prescription drug monitoring information if the other program is compatible with Kentucky’s program.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 218A.245 Reciprocal agreements or contracts with other states, jurisdictions, counties, or political subdivisions or with an administering organization to share prescription drug monitoring information. (Effective July 15, 2026)

  1 provisions

  The secretary may make reciprocal agreements or contracts to share prescription drug monitoring information if the other program is compatible with Kentucky’s program.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 350.600 Legislative findings and intent -- Commercial oil shale mining prohibited until adoption of rules and regulations.

  1 provisions

  Oil shale mining and processing are barred until the cabinet issues standards; the cabinet must also file rules, and limited pre-rule testing is allowed with notice.

  Regulation Open & Chat

• United States — Kentucky

  KRS § 61.932 Personal information security and breach investigation procedures and practices for certain public agencies and nonaffiliated third parties.

  1 provisions

  Agencies and nonaffiliated third parties that handle personal information must maintain security and breach-investigation procedures, and a nonaffiliated third party must notify the agency of a breach within 72 hours of determining it.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 315.020 Only pharmacists to supervise manufacturing of pharmaceuticals or practice pharmacy -- Exceptions -- Access to pharmacy electronic database allowed under specific conditions -- Persons employed to assist practice of pharmacy after April 1, 2009, to be registered pharmacy technicians or exempt under KRS 315.135.

  1 provisions

  Pharmacy owners and manufacturers who are not pharmacists must put a pharmacist in charge, and people generally may not practice pharmacy without a license.

  Act or statute Open & Chat