Law / United States / 
Kentucky
Kentucky Consumer Data Protection Act, consent to collect automatic content recognition data (from July 1, 2027)
A sensitive categories rule binding private bodies.
- Obligation class
- Consent
- Audit expectation
- none
As of .
What it requires
- This duty does not bind until , and until then the earlier text of KRS 367.3617 applies without it (KRS 367.3617, effective ).
- If you are a controller under the Kentucky Consumer Data Protection Act, do not collect automatic content recognition data, meaning data about a consumer's content viewing history collected through technology embedded or operated through a smart television or smart monitor that identifies in real time the specific content displayed by analyzing audio or video fingerprints, without the consumer's consent (KRS 367.3617(1)(f), KRS 367.3611(3)).
These lines are LexLint's reading of the law's text, as of .
What it makes you log
Logging duty
KRS 367.3617(1)(f) bars a controller from collecting automatic content recognition data without consent. It requires no log, no record of consents and no report, and gives no body a power to inspect one.
- Kind
- None
- As of
What this law does
A controller must not collect automatic content recognition data without a consumer's consent. The duty was added to the statute by chapter 118 of the 2026 Kentucky Acts, effective . Automatic content recognition data is data about a consumer's content viewing history collected through technology embedded or operated through a smart television or smart monitor that identifies in real time the specific content displayed by analyzing audio or video fingerprints.
When LexLint raises it
When your app profile says your app tracks devices.