Skip to content

Kentucky Children’s Privacy Laws (2026)

Live

1 law tracked · overall: In force · current as of October 1, 2026

Kentucky has one tracked children’s privacy law, listed below with its status, the ages it covers, litigation posture, and a link to the official primary source. For the interactive view, open Kentucky in the tracker map.

Kentucky Consumer Data Protection Act (KCDPA): minors' provisions

Live

HB 15 (2024 RS)

In force · Privacy law (minors) · effective 2026-01-01 · binds operators

Ages: Known children under 13 (COPPA); no separate teen opt-in band

Requires: Personal data collected from a 'known child' (a child as COPPA defines one, under 13) is 'sensitive data,' and a controller may not process a consumer's sensitive data without consent or, in the case of a known child, other than in accordance with the federal Children's Online Privacy Protection Act (COPPA, 15 U.S.C. 6501 et seq.) (KRS 367.3611, 367.3617(1)(e)); controllers and processors that comply with COPPA's verifiable-parental-consent requirements are deemed compliant with any obligation to obtain parental consent under the Act (KRS 367.3613(4)). A parent or legal guardian may invoke the child's consumer rights on the child's behalf (KRS 367.3615(1)). The Act sets no separate opt-in, targeted-advertising or sale rule for teens 13-17, who have the same opt-out rights as adult consumers.

Source: apps.legislature.ky.gov for Kentucky Consumer Data Protection Act (KCDPA): minors' provisions (opens in a new tab)

Entry last reviewed

Also on the books (out of scope) · 1 measure
  • HB 278 (2024 RS): adult-content/pornography age-verification law. Adds age-verification and civil-liability provisions to KRS Ch. 436; signed Apr. 5, 2024, in effect since July 15, 2024.

Out-of-scope mandates (like adult-content age-gates) are tracked separately and don’t set this state’s status.

Federal · COPPAapplies here too

Regardless of state law, COPPA governs personal information collected from children under 13: notice, verifiable parental consent, data minimization, and (under the 2025 amended Rule) limits on retention and third-party sharing.

Source: ecfr.gov for 16 C.F.R. Part 312 (opens in a new tab)

How Kentucky compares

Not legal advice. I build products for a living; I’m not a lawyer. Compiled from primary sources and reviewed monthly as part of the State Children’s Privacy Law Tracker; AI-assisted research, verified against each law’s official source, but laws and injunctions change fast, so confirm the latest before relying on it. Related: COPPA’s Gray Areas.

Cite this page: Calvo, Isaac A. “Kentucky: Children’s Privacy Laws.” https://isaaccalvo.com/child-privacy-laws/kentucky (data as of 2026-10-01; reviewed monthly).