HB 473
AN ACT relating to consumer data privacy.
In Plain Language
This bill makes technical updates to Kentucky's data privacy law. It clarifies that health care providers following federal HIPAA rules don't have to comply with certain state data privacy requirements. It also adds a requirement for companies to assess risks when they use personal data for profiling that could unlawfully discriminate against people.
Official summary
Amend KRS 367.3613 to exempt information collected by a health care provider that maintains protected health information in accordance with HIPAA and information included in a limited data set as described in 45 C.F.R. sec.164.514(e); amend KRS 367.3621 to make a technical change to include a data protection impact assessment of processing of personal data for the purposes of profiling where the profiling presents a foreseeable risk of an unlawful disparate impact on consumers.
Sponsor
—
Cosponsors
None listed
Latest action
signed by Governor (Acts Ch. 13)
Mar 15, 2025
Official source
Action history
Write to this bill’s sponsor
Draft a constituent message about this bill in your own words -- grounded in the actual summary, not a form letter.
Don’t worry — we’ll help you form the message.
Compose a message