Consumer Reports believes amendments are necessary to strengthen S.B. 15, Kentucky consumer privacy legislation. The bill would extend to Kentucky consumers important new protections, including the right to know the information companies have collected about them, the right to access, correct, and delete that information, as well as the ability to require businesses to honor universal opt out preference signals and authorized agents’ privacy rights requests.
However, the legislation still contains significant loopholes that would hinder its overall effectiveness. We offer several suggestions to strengthen the bill to provide the level of protection that Kentucky consumers deserve. Our suggestions include:
- Strengthening data minimization provisions.
- Removing the pseudonymous data carveout.
- Adding a private right of action.
- Strengthening non-discrimination and loyalty program language.
- Limiting authentication requirements for opt-outs.
- Eliminating entity level sectoral carveouts.
- Including strong civil rights protections.
For the full letter, please see the attached PDF.