
KCDPA Compliance Checklist: Kentucky Privacy Law
KCDPA compliance (KRS 367.3611 to 367.3629): coverage, privacy notice, opt-in sensitive data, 45-day requests, assessments, processor contracts, 30-day cure.
Loading...
Browse our full library of legal guides, state law breakdowns, and practical legal information.
3308 articles
Browse by Category →
KCDPA compliance (KRS 367.3611 to 367.3629): coverage, privacy notice, opt-in sensitive data, 45-day requests, assessments, processor contracts, 30-day cure.

Under the KCDPA (KRS 367.3615), Kentuckians can access, correct, delete, port, and opt out of data sales; controllers must respond within 45 days.

The KCDPA (KRS 367.3611 to 367.3629) takes effect January 1, 2026, a close clone of Virginia's law with a 100,000-consumer threshold and opt-in sensitive data.

An INCDPA compliance checklist: IC 24-15 thresholds, privacy notice, opt-in sensitive data, 45-day requests, assessments, and the permanent 30-day cure before Jan. 1, 2026.

Indiana's INCDPA (IC 24-15-3-1) gives residents access, correction, deletion, portability, and opt-out rights starting Jan. 1, 2026, with a 45-day response window.

The Indiana Consumer Data Protection Act (IC 24-15) takes effect Jan. 1, 2026, the longest runway of any state privacy law. A Virginia-style INCDPA explainer.

Maryland MODPA compliance: strict-necessity data minimization (Com. Law 14-4607), sensitive-data sale ban, UOOM, assessments, and penalties to $10,000.

Maryland's MODPA (Com. Law 14-4605) grants access, deletion, opt-out, and a 45-day response, plus the strictest sensitive-data and minimization protections in the US.

MODPA (Md. Com. Law 14-4601 et seq.) took effect Oct 1, 2025, the strictest US state privacy law: hard data minimization and a ban on selling sensitive data.

A Minnesota MCDPA compliance checklist: thresholds, the required data inventory under 325M.18, sensitive-data opt-in, and profiling-answer duties.

Minnesota MCDPA consumer rights under Minn. Stat. 325M.14: access, delete, opt out, a third-party list, and a unique right to question profiling.

The Minnesota Consumer Data Privacy Act (Minn. Stat. ch. 325M) took effect July 31, 2025, with a unique right to question profiling decisions.