Kentucky Enacts Data Breach Notification Law - New Law Limits Cloud Service Providers’ Collection of Student Data


Kentucky is the 47th state, along with the District of Columbia, Guam, Puerto Rico and the Virgin Islands, to enact a data breach notification law requiring business entities to notify individuals of security breaches involving personally identifiable information. Kentucky’s law also aims to protect student data by imposing new limits on cloud service providers.

House Bill 232, signed into law by Governor Steve Beshear earlier this month, requires any entity transacting business in Kentucky that reasonably believes a data breach has caused or will cause identity theft or fraud to notify all affected Kentucky residents whose personally identifiable information is or may be compromised. The Kentucky law defines personally identifiable information as “an individual’s first name or first initial and last name” in combination with one of the following three elements: (1) Social Security number; (2) driver’s license number; (3) account number, credit or debit number, in combination with any required security code, access code, or password permit access to an individual’s financial account.

Please see full alert below for more information.

LOADING PDF: If there are any problems, click here to download the file.

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© King & Spalding | Attorney Advertising

Written by:


King & Spalding on:

Readers' Choice 2017
Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:

Sign up to create your digest using LinkedIn*

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.

Already signed up? Log in here

*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.