Resources / AI Laws by State / Kentucky
Government AI rules
Kentucky AI and Privacy Laws
Kentucky’s SB 4 (2025) requires an AI Governance Committee in the Commonwealth Office of Technology to set standards for state agencies’ use of generative and high-risk AI, aligned with ISO/IEC 42001, and also addresses deepfakes in election communications.
What the law says
The Kentucky Consumer Data Protection Act, effective January 1, 2026, gives residents the right to opt out of profiling that produces legal or similarly significant effects.
In January 2026 the Attorney General sued Character.AI, including claims under the new privacy law.
A 2024 law extends intimate image protections to AI-generated depictions.
Key dates
| Date | What takes effect | Status |
|---|---|---|
| Kentucky Consumer Data Protection Act | In effect |
What this means for your organization
These rules apply mainly to state and local government. Agencies, public schools, and the vendors that serve them should expect requirements for AI inventories, written policies, and human oversight.
Our 2027 AI Governance Checklist covers the steps most organizations need, and our State AI Law Trackers explain the rules for specific industries.
Other states in this category
See every state on the AI Laws by State map.
This page is general information for planning purposes. Laws and guidance change, so confirm current requirements before acting. It is not legal advice. For legal advice about your organization, consult a licensed attorney.
Talk through your AI and privacy questions
Tell us what you're working on, and we'll reply within one business day.