Duty LXD-2457
Tracks devices, in Kentucky
Each law's tag says when it binds: since in force from , in 8 months not yet in force
Destruction of customer's records containing personally identifiable informationsince 2 lines
Destruction of customer's records, KRS 365.725 · Read the law's page
- Applies to a business: a sole proprietorship, partnership, corporation, limited liability company, association, or other entity, whether or not operated for profit, including an entity that destroys records. It does not include a bank, credit union, savings association, or association as KRS 365.720 defines each by reference to federal banking law and KRS Chapter 286.
- When you dispose of, other than by storage, any customer's records that are not required to be retained, take reasonable steps to destroy, or arrange for the destruction of, the portion of the records containing personally identifiable information, by shredding, erasing, or otherwise modifying the personal information to make it unreadable or indecipherable through any means.
Kentucky Consumer Data Protection Act, consent to collect automatic content recognition data (from July 1, 2027)from , in 8 months2 lines
KRS 367.3617(1)(f) · Read the law's page
- This duty does not bind until , and until then the earlier text of KRS 367.3617 applies without it (KRS 367.3617, effective ).
- If you are a controller under the Kentucky Consumer Data Protection Act, do not collect automatic content recognition data, meaning data about a consumer's content viewing history collected through technology embedded or operated through a smart television or smart monitor that identifies in real time the specific content displayed by analyzing audio or video fingerprints, without the consumer's consent (KRS 367.3617(1)(f), KRS 367.3611(3)).