Kentucky Privacy Law Expands; Maine Bill Faces Legislative Hurdle
Kentucky expands privacy law; Maine's bill stalls in legislative process.
Why it matters: Legal professionals in Kentucky and Maine must navigate different privacy landscapes, impacting compliance strategies for businesses interacting with sensitive data.
- Kentucky's law includes 'automatic content recognition' as sensitive data.
- Maine's LD 1822 stalled in the state House as of September 2023.
- Kentucky's law affects businesses handling data of 100,000+ residents by 2026.
- Varied state laws complicate creating uniform U.S. data privacy standards.
Kentucky has expanded its data privacy legislation with the signing of House Bill 473 by Governor Andy Beshear on March 15, 2025. The law now categorizes 'automatic content recognition' as sensitive data, impacting companies dealing with the data of Kentucky residents. Businesses meeting thresholds of processing data for over 100,000 residents or 25,000 if selling data greatly contributes to revenue must comply. Penalties are significant, reaching up to $7,500 per violation, which will be enforced by the Attorney General. For more information, see the detailed update.
Meanwhile, Maine's LD 1822, aimed at strengthening online data privacy, hit a legislative snag in September 2023. It failed to progress past a key procedural vote in the state House, illustrating the ongoing difficulties in passing comprehensive data privacy laws. To explore the legislative context further, check out the Mayer Brown review.
While Kentucky moves forward with its privacy expansions, Maine's stalled efforts highlight the challenges of establishing uniform data privacy standards across different states. This variability necessitates that legal professionals, especially those working in businesses across multiple jurisdictions, continually update and adapt compliance strategies to manage these regional differences effectively.