KentuckyAI regulation

Regulation Status

• Kentucky has not enacted a comprehensive AI statute but has layered AI-specific rules onto criminal law, government operations, elections, and consumer privacy. House Bill 207 (effective 28 March 2024) amended the state's child sexual abuse material and intimate-image statutes to cover any visual depiction created, adapted, or modified by a computer to appear to be an identifiable person, and relaxed the identifiable-person standard so the Commonwealth need not prove the minor's actual identity, age, or existence.
• The state's principal AI governance measure is Senate Bill 4, signed by Governor Beshear on 24 March 2025 as an emergency act. SB 4 (codified across KRS 42.720-42.742) creates an Artificial Intelligence Governance Committee within the Commonwealth Office of Technology, directs that office to set standards for responsible, ethical, and transparent government use of generative and high-risk AI, and requires agencies to disclose certain AI use and offer appeal options for external decisions; these government provisions take effect 1 December 2025 and have no specified penalty.
• The same bill amended KRS Chapter 117 to define synthetic media and establish a cause of action allowing candidates depicted in altered electioneering communications to seek injunctive or other equitable relief requiring a clear and conspicuous disclosure, plus attorney's fees and costs.
• On automated decision-making, the Kentucky Consumer Data Protection Act (HB 15, 2024), codified at KRS 367.3611 et seq. and effective 1 January 2026, gives consumers the right to opt out of profiling in furtherance of decisions producing legal or similarly significant effects and requires data protection assessments for such processing, enforced by the Attorney General with penalties up to $7,500 per violation. As of 2026 Kentucky has no omnibus developer or deployer risk-classification framework.