Esheria Regulatory Atlas

Data protection in United States — Kentucky

Personal data, privacy, cybersecurity duties, processing, and cross-border transfers. Every result links to its stored legal text and available official source evidence.

174 matching statutes

• United States — Kentucky

  KRS § 151.629 Interagency Technical Advisory Committee on Groundwater -- Duties and responsibilities.

  1 provisions

  This section creates a groundwater committee and requires it to have specific members and perform several groundwater-planning and review duties.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 42.731 Duties of Artificial Intelligence Governance Committee -- Duties of Commonwealth Office of Technology regarding artificial intelligence systems -- Establishment of policies and operating standards on use of artificial intelligence by state agencies -- Report -- Administrative regulations.

  1 provisions

  The Commonwealth Office of Technology must set up and run AI governance policies, standards, reporting, and oversight for state entities, including disclosure, privacy, and risk-management rules.

  Regulation Open & Chat

• United States — Kentucky

  KRS § 214.645 Reporting system of HIV-positive persons -- Confidentiality and reporting requirements -- Reporting system surveillance, assessment, and restrictions.

  1 provisions

  The cabinet must run a named HIV reporting system and impose confidentiality, security, assessment, and breach-response rules.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 312.160 Appeal -- Reporting of disciplinary matters.

  1 provisions

  A licensed person disciplined after a hearing may appeal to the Franklin Circuit Court, and disciplinary matters must be reported to the Healthcare Integrity and Protection Data Bank or the board’s authorized agent.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 257.495 Board not to release agricultural or food system information considered part of critical infrastructure -- Exceptions.

  1 provisions

  The board generally may not release agricultural or food system records, data, or information treated as critical infrastructure, except in two stated situations.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 315.038 Definitions for section -- Ambulatory pharmacies -- Reporting requirements -- Data to be shared with commissioner of insurance -- Contract with third-party to collect or process data.

  1 provisions

  Ambulatory pharmacies in Kentucky must report dispensing-cost data to the board on a set schedule, and the board must share the data with the commissioner and keep it confidential.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 151B.133 Duties of Office of the Kentucky Center for Statistics.

  1 provisions

  The Office of the Kentucky Center for Statistics must carry out a set of data, research, privacy, reporting, and administration duties for the Kentucky Longitudinal Data System.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 216.2927 Types of data not to be published, released, or subject to inspection -- Public-use data agreements and privacy rules -- Confidentiality of raw data -- Penalty for violation.

  1 provisions

  The cabinet and its staff must keep certain patient and provider-related data confidential, limit who can access raw data, and release only non-identifying aggregate data after the stated delay. Violations by cabinet employees can trigger fines, jail, and removal from office or employment.

  Rule Open & Chat

• United States — Kentucky

  KRS § 7A.240 Authority of board.

  1 provisions

  The board may require retirement systems or state agencies to provide information, hold public hearings, set report formats and deadlines, request audits, and use consultants with approval. Some protected information is excluded.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 77.155 Prohibited emission of air contaminants -- Basis of compliance and enforcement.

  1 provisions

  This section prohibits discharging air contaminants above applicable emission standards or in amounts that harm people or property. It also lets the air pollution control board set limits and requires enforcement to rely on approved or scientifically defensible EPA-accepted methods.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 211.575 Statewide system for stroke response and treatment.

  1 provisions

  The Department for Public Health must run a statewide stroke response and treatment system, maintain a stroke database, require hospital stroke reporting, and provide annual reporting, while protecting confidential data under HIPAA.

  Act or statute Open & Chat

• United States — Kentucky

  KRS § 15.844 Data match agreements between office and financial institutions -- Surrender of assets when parent is subject to lien -- Fee -- Financial institutions not liable.

  1 provisions

  Financial institutions must enter cooperative data-match agreements with the Attorney General and report identifying information quarterly for obligated parents with arrears; they may receive a fee capped at actual cost and are protected from liability in the specified compliance disclosures and actions.

  Act or statute Open & Chat