Search statutes, citations, and provisions

Provision text match · United States — Kentucky · en

KRS § 367.3621 Data protection impact assessment -- Requirements -- Disclosure to Attorney General -- Confidentiality and exceptions -- Application.

KRS § 367.3621 Data protection impact assessment -- Requirements -- Disclosure to Attorney General -- Confidentiality and exceptions -- Application.

367.3621 Data protection impact assessment -- Requirements -- Disclosure to Attorney General -- Confidentiality and exceptions -- Application. (1) Controllers shall conduct and document a data protection impact assessment of each of the following processing activities involving personal data: (a) The processing of personal data for the purposes of targeted a

Topics: confidentiality, data protection impact assessment, disclosure to Attorney General

Provision text match · United States — Kentucky · en

KRS § 194A.099 Division of Health Benefit Exchange within Office of Data Analytics to administer the Patient Protection and Affordable Care Act of 2010 -- Powers and duties -- Administrative regulations -- Office of Data Analytics not to establish procedures and rules that conflict with the Patient Protection and Affordable Care Act.

KRS § 194A.099 Division of Health Benefit Exchange within Office of Data Analytics to administer the Patient Protection and Affordable Care Act of 2010 -- Powers and duties -- Administrative regulations -- Office of Data Analytics not to establish procedures and rules that conflict with the Patient Protection and Affordable Care Act.

194A.099 Division of Health Benefit Exchange within Office of Data Analytics to administer the Patient Protection and Affordable Care Act of 2010 -- Powers and duties -- Administrative regulations -- Office of Data Analytics not to establish procedures and rules that conflict with the Patient Protection and Affordable Care Act. Except as provided in KRS 304.

Topics: administrative regulations, health benefit exchange, health coverage enrollment

Provision text match · United States — Kentucky · en

KRS § 311.705 Genetic testing -- Guidelines for collection and use of genetic data.

KRS § 311.705 Genetic testing -- Guidelines for collection and use of genetic data.

311.705 Genetic testing -- Guidelines for collection and use of genetic data. (1) As used in this section: (a) "Biological sample" means any material part of the human, discharge therefrom, or derivative thereof, such as tissue, blood, urine, or saliva, known to contain deoxyribonucleic acid (DNA); (b) "Consumer" means an individual who is a resident of the

Topics: consent, data security, disclosure restrictions, genetic data handling

Provision text match · United States — Kentucky · en

KRS § 367.3613 Application -- Limitations -- Information and data exemptions -- Compliance with federal children's online privacy laws.

KRS § 367.3613 Application -- Limitations -- Information and data exemptions -- Compliance with federal children's online privacy laws.

367.3613 Application -- Limitations -- Information and data exemptions -- Compliance with federal children's online privacy laws. (1) KRS 367.3611 to 367.3629 apply to persons that conduct business in the Commonwealth or produce products or services that are targeted to residents of the Commonwealth and that during a calendar year control or process personal

Topics: children's online privacy, consumer privacy exemptions, personal data processing

Provision text match · United States — Kentucky · en

KRS § 367.3617 Limitations on the collection and use of personal data by a controller -- Waiver of consumer rights contrary to public policy -- Privacy notice -- Notice for sale of personal data to third party -- Process for consumers to exercise consumer rights requirement. (Effective until July 1, 2027)

KRS § 367.3617 Limitations on the collection and use of personal data by a controller -- Waiver of consumer rights contrary to public policy -- Privacy notice -- Notice for sale of personal data to third party -- Process for consumers to exercise consumer rights requirement. (Effective until July 1, 2027)

367.3617 Limitations on the collection and use of personal data by a controller -- Waiver of consumer rights contrary to public policy -- Privacy notice -- Notice for sale of personal data to third party -- Process for consumers to exercise consumer rights requirement. (Effective until July 1, 2027) (1) A controller shall: (a) Limit the collection of persona

Topics: consumer rights, data processing restrictions, data security, personal data collection

Provision text match · United States — Kentucky · en

KRS § 367.3617 Limitations on the collection and use of personal data by a controller -- Waiver of consumer rights contrary to public policy -- Privacy notice -- Notice for sale of personal data to third party -- Process for consumers to exercise consumer rights requirement. (Effective July 1, 2027)

KRS § 367.3617 Limitations on the collection and use of personal data by a controller -- Waiver of consumer rights contrary to public policy -- Privacy notice -- Notice for sale of personal data to third party -- Process for consumers to exercise consumer rights requirement. (Effective July 1, 2027)

367.3617 Limitations on the collection and use of personal data by a controller -- Waiver of consumer rights contrary to public policy -- Privacy notice -- Notice for sale of personal data to third party -- Process for consumers to exercise consumer rights requirement. (Effective July 1, 2027) (1) A controller shall: (a) Limit the collection of personal data

Topics: consumer rights, personal data processing, privacy notices

Provision text match · United States — Kentucky · en

KRS § 194A.065 Recording of data elements for centralized criminal history record information system -- Definition of front-line staff.

KRS § 194A.065 Recording of data elements for centralized criminal history record information system -- Definition of front-line staff.

194A.065 Recording of data elements for centralized criminal history record information system -- Definition of front-line staff. (1) For the purposes of this section, "front-line staff" means an employee of the Division of Service Regions of the Department for Community Based Services or the immediate supervisor of an employee whose professional duties incl

Topics: agency access, background checks, data recording

Provision text match · United States — Kentucky · en

KRS § 367.3619 Data processing responsibilities to controller -- Contract requirements between controller and processor.

KRS § 367.3619 Data processing responsibilities to controller -- Contract requirements between controller and processor.

367.3619 Data processing responsibilities to controller -- Contract requirements between controller and processor. (1) A processor shall adhere to the instructions of a controller and shall assist the controller in meeting its obligations under KRS 367.3611 to 367.3629. Such assistance shall include: (a) Taking into account the nature of processing and the i

Topics: controller-processor contracts, data processing, processor obligations

Provision text match · United States — Kentucky · en

KRS § 367.3625 Construction of KRS 367.3611 to 367.3629 -- Uses of data by controller or processor -- Application of evidentiary privilege -- Disclosure of data to third-party controller -- Limitations on processing of personal data -- Burden of proof.

KRS § 367.3625 Construction of KRS 367.3611 to 367.3629 -- Uses of data by controller or processor -- Application of evidentiary privilege -- Disclosure of data to third-party controller -- Limitations on processing of personal data -- Burden of proof.

367.3625 Construction of KRS 367.3611 to 367.3629 -- Uses of data by controller or processor -- Application of evidentiary privilege -- Disclosure of data to third- party controller -- Limitations on processing of personal data -- Burden of proof. (1) Nothing in KRS 367.3611 to 367.3629 shall be construed to restrict a controller's or processor's ability to:

Topics: controller/processor compliance, personal data processing, research exemptions

Provision text match · United States — Kentucky · en

KRS § 456.020 Interpretation of chapter.

KRS § 456.020 Interpretation of chapter.

456.020 Interpretation of chapter. (1) This chapter shall be interpreted to: (a) Allow victims to obtain effective, short-term protection against further wrongful conduct in order that their lives may be as secure and as uninterrupted as possible; (b) Expand the ability of law enforcement officers to effectively respond to further wrongful conduct so as to p

Provision text match · United States — Kentucky · en

KRS § 403.715 Interpretation of KRS 403.715 to 403.785.

KRS § 403.715 Interpretation of KRS 403.715 to 403.785.

Interpretation of KRS 403.715 to 403.785. KRS 403.715 to 403.785 shall be interpreted to: (1) Allow victims to obtain effective, short-term protection against further wrongful conduct in order that their lives may be as secure and as uninterrupted as possible; (2) Expand the ability of law enforcement officers to effectively respond to further wrongful condu

Topics: domestic violence, law enforcement authority, protective orders

Provision text match · United States — Kentucky · en

KRS § 311.710 Legislative findings.

KRS § 311.710 Legislative findings.

nds and declares: (1) That it is in the interest of the people of the Commonwealth of Kentucky that every precaution be taken to insure the protection of every viable unborn child being aborted, and every precaution be taken to provide life-supportive procedures to insure the unborn child its continued life after its abortion; and (2) That currently, in the

Provision text match · United States — Kentucky · en

KRS § 151.629 Interagency Technical Advisory Committee on Groundwater -- Duties and responsibilities.

KRS § 151.629 Interagency Technical Advisory Committee on Groundwater -- Duties and responsibilities.

encies, to be appointed by that agency: (a) Division of Conservation of the Department for Natural Resources; (b) Division of Public Health Protection and Safety of the Cabinet for Health and Family Services; (c) Division of Forestry of the Department for Natural Resources; (d) Division of Environmental Services of the Department of Agriculture; (e) Division

Topics: agency coordination, data repository, groundwater monitoring

Provision text match · United States — Kentucky · en

KRS § 42.731 Duties of Artificial Intelligence Governance Committee -- Duties of Commonwealth Office of Technology regarding artificial intelligence systems -- Establishment of policies and operating standards on use of artificial intelligence by state agencies -- Report -- Administrative regulations.

KRS § 42.731 Duties of Artificial Intelligence Governance Committee -- Duties of Commonwealth Office of Technology regarding artificial intelligence systems -- Establishment of policies and operating standards on use of artificial intelligence by state agencies -- Report -- Administrative regulations.

s, state agencies, and state administrative bodies by: (a) Developing policy standards and guiding principles to mitigate risks and protect data and privacy of Kentucky citizens and businesses that adhere to the latest version of Standard ISO/IEC 42001 of the International Organization for Standardization; (b) Establishing technology standards to provide pro

Topics: artificial intelligence governance, data protection, government compliance, reporting

Provision text match · United States — Kentucky · en

KRS § 214.645 Reporting system of HIV-positive persons -- Confidentiality and reporting requirements -- Reporting system surveillance, assessment, and restrictions.

KRS § 214.645 Reporting system of HIV-positive persons -- Confidentiality and reporting requirements -- Reporting system surveillance, assessment, and restrictions.

f the person's name, of all persons who test positive for the human immunodeficiency virus (HIV) infection. The reporting shall include the data including, but not limited to, CD4 count and viral load, and other information that are necessary to comply with the confidentiality and reporting requirements of the most recent edition of the Centers for Disease C

Topics: confidentiality, data security, reporting systems

Provision text match · United States — Kentucky · en

KRS § 312.160 Appeal -- Reporting of disciplinary matters.

KRS § 312.160 Appeal -- Reporting of disciplinary matters.

rsonally served, the final order of the board shall be final. (2) Any disciplinary matter shall be reported to the Healthcare Integrity and Protection Data Bank or to the board's authorized agent. Effective: June 24, 2003 History: Amended 2003 Ky. Acts ch. 126, sec. 10, effective June 24, 2003. -- Amended 1996 Ky. Acts ch. 318, sec. 259, effective July 15, 1

Topics: appeals, disciplinary reporting

Provision text match · United States — Kentucky · en

KRS § 257.495 Board not to release agricultural or food system information considered part of critical infrastructure -- Exceptions.

KRS § 257.495 Board not to release agricultural or food system information considered part of critical infrastructure -- Exceptions.

ns. (1) Except as provided in subsections (2) and (3) of this section, the board shall not release any agricultural or food system records, data, or information considered a part of the critical infrastructure. "Critical infrastructure" shall have the same meaning as in 42 U.S.C. sec. 5195c(e). (2) Any records, data, or information excluded under application

Topics: government information release, records disclosure

Provision text match · United States — Kentucky · en

KRS § 315.038 Definitions for section -- Ambulatory pharmacies -- Reporting requirements -- Data to be shared with commissioner of insurance -- Contract with third-party to collect or process data.

KRS § 315.038 Definitions for section -- Ambulatory pharmacies -- Reporting requirements -- Data to be shared with commissioner of insurance -- Contract with third-party to collect or process data.

315.038 Definitions for section -- Ambulatory pharmacies -- Reporting requirements -- Data to be shared with commissioner of insurance -- Contract with third-party to collect or process data. (1) As used in this section: (a) "Ambulatory pharmacy" has the same meaning as in KRS 304.17A-595; and (b) "Commissioner" means the commissioner of the Department of In

Topics: confidential records, data sharing, pharmacy reporting, vendor contracting

Provision text match · United States — Kentucky · en

KRS § 151B.133 Duties of Office of the Kentucky Center for Statistics.

KRS § 151B.133 Duties of Office of the Kentucky Center for Statistics.

enter for Statistics. The duties of the Office of the Kentucky Center for Statistics shall be to: (1) Oversee and maintain the warehouse of data in the Kentucky Longitudinal Data System; (2) Develop de-identification standards and processes using modern statistical methods; (3) Conduct research and evaluation regarding federal, state, and local education and

Topics: data governance, public reporting, research and evaluation

Provision text match · United States — Kentucky · en

KRS § 216.2927 Types of data not to be published, released, or subject to inspection -- Public-use data agreements and privacy rules -- Confidentiality of raw data -- Penalty for violation.

KRS § 216.2927 Types of data not to be published, released, or subject to inspection -- Public-use data agreements and privacy rules -- Confidentiality of raw data -- Penalty for violation.

216.2927 Types of data not to be published, released, or subject to inspection -- Public-use data agreements and privacy rules -- Confidentiality of raw data -- Penalty for violation. (1) The following types of data shall be deemed as relating to personal privacy and, except by court order, shall not be published or otherwise released by the cabinet or its s

Topics: confidentiality, data release, patient information