Live threats

HighClaude Dispatch Flaw Enables Browser Extension RCE on Host OS BreachBrenner Base Tunnel SE Confirms Data Breach; Extortion Group Claims 812 GB Stolen FineCNIL issues ten cybersecurity fines to French local authorities DeadlineEgyptian court fines and orders closure of independent outlet Mada Masr, sentencing editor Lina Attalah CriticalCritical Android “SMS of Death” Vulnerability (CVE‑2026‑58882) Enables Remote Call Disruption BreachHackers Steal $133 Million from French Bank Crédit Mutuel Arkéa via Compromised Service‑Provider Platform Rule changeAgency limits programmatic access to FederalRegister․gov and eCFR․gov, requiring API use and CAPTCHA verification CriticalCritical OpenSSH Auth Bypass Flaw Lets Long Passwords Circumvent Authentication on Alpine Linux

HighClaude Dispatch Flaw Enables Browser Extension RCE on Host OS BreachBrenner Base Tunnel SE Confirms Data Breach; Extortion Group Claims 812 GB Stolen FineCNIL issues ten cybersecurity fines to French local authorities DeadlineEgyptian court fines and orders closure of independent outlet Mada Masr, sentencing editor Lina Attalah CriticalCritical Android “SMS of Death” Vulnerability (CVE‑2026‑58882) Enables Remote Call Disruption BreachHackers Steal $133 Million from French Bank Crédit Mutuel Arkéa via Compromised Service‑Provider Platform Rule changeAgency limits programmatic access to FederalRegister․gov and eCFR․gov, requiring API use and CAPTCHA verification CriticalCritical OpenSSH Auth Bypass Flaw Lets Long Passwords Circumvent Authentication on Alpine Linux HighClaude Dispatch Flaw Enables Browser Extension RCE on Host OS BreachBrenner Base Tunnel SE Confirms Data Breach; Extortion Group Claims 812 GB Stolen FineCNIL issues ten cybersecurity fines to French local authorities DeadlineEgyptian court fines and orders closure of independent outlet Mada Masr, sentencing editor Lina Attalah CriticalCritical Android “SMS of Death” Vulnerability (CVE‑2026‑58882) Enables Remote Call Disruption BreachHackers Steal $133 Million from French Bank Crédit Mutuel Arkéa via Compromised Service‑Provider Platform Rule changeAgency limits programmatic access to FederalRegister․gov and eCFR․gov, requiring API use and CAPTCHA verification CriticalCritical OpenSSH Auth Bypass Flaw Lets Long Passwords Circumvent Authentication on Alpine Linux

Updated 08:40 UTC All intelligence →

Digital Trust PractitionersAssociation of Digital Trust Practitioners · TrustPractitioners.org

EN

Regulations › US states › Kentucky

KCDPA

Kentucky Consumer Data Protection Act

In force privacy consumer rights

WhenIn effect since 1 January 2026

Who enforces itState Attorney General

Who it applies toBusinesses that process personal data of the state's residents above the law's thresholds. Thresholds, exemptions and sensitive-data rules differ by state.

ThresholdsApplies to businesses controlling or processing data of 100,000+ Kentucky consumers, or 25,000… Universal opt-outNot required Cure periodThe AG must give 30 days' written notice Request deadlineControllers must respond within 45 days, extendable once by 45 days Maximum penaltyCivil penalty up to $7,500 per violation, plus attorney's fees and costs Private actionNo private right of action

Recent developments

Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

Explore the map Follow Regulatory Watch

In force
Coming into force
Sector laws

AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL