Duty LXD-4494
Deploys a mental-health chatbot, in Kansas
Each law's tag says when it binds: since in force from a date not yet set not yet in force
Kansas Consumer Protection Act, reasonable security and records-destruction duty for holders of personal informationsince 4 lines
K.S.A. 50-6,139b · Read the law's page
- This binds any holder of personal information: any individual, partnership, corporation, trust, estate, cooperative, association, government, governmental subdivision, agency, or other entity that in the ordinary course of business collects, maintains, or possesses another person's personal information.
- Implement and maintain reasonable procedures and practices appropriate to the nature of the information, and exercise reasonable care to protect it from unauthorized access, use, modification, or disclosure. Being subject to and compliant with another federal or state law or regulation governing the same procedures and practices is deemed compliance with this duty.
- Unless a federal law or regulation requires otherwise, destroy or arrange for the destruction of records containing personal information once you no longer intend to maintain or possess them, by shredding, erasing, or otherwise rendering the personal information unreadable or undecipherable.
- There is no private right of action. Only the Kansas Attorney General may enforce this section, as an unconscionable act or practice under the Kansas Consumer Protection Act, seeking a civil penalty of up to $10,000 per violation under K.S.A. 50-636.
Kansas Consumer Protection Act — Deceptive Acts Prohibitionfrom a date not yet set3 lines
Kan. Stat. Ann. § 50-626 (Kansas Consumer Protection Act, Article 6)
- This law is recorded as enacted, but the record carries no commencement date, so whether it is yet in force has to be established before relying on what follows.
- Do not engage in a deceptive act or practice in connection with a consumer transaction.
- Do not impersonate a human through an undisclosed bot in a consumer transaction.