FINES & PENALTIES

Violations
Up to $2,000

BREACH NOTIFICATION

Mandated Timeframe
Without unreasonable delay

QUICK FACTS

Kentucky Privacy Law Information

BREACH REPORTING

If notification is required for more than 1,000 consumers, the breached Organization must also notify all consumer reporting agencies and credit bureaus.

CONSUMER NOTIFICATION

Breach notification without delay must be given to any resident of Kentucky affected by a breach that includes personal information.

FINES & PENALTIES

Organizations may be fined or penalized for Vendor violations. Consumers may bring an action to recover damages for violations of the data destruction requirements.

INDUSTRY SPECIFIC LAWS

Additional requirements may apply to student data and cloud computing service providers.

PRIVACY PROGRAM

Organizations and Vendors in the business of destroying records must have measures in place for the secure destruction of records containing personal information so the records are unreadable or indecipherable.

VENDOR/3RD PARTIES

Vendors must notify Organizations as soon as possible after the discovery of a breach or suspected breach. The Organization will be responsible to complete any required regulatory reporting and consumer notification.

CONTACT

TTAPrivacy.club