Kentucky’s New Privacy Law Is Now in Effect — What ALL Dealerships Need to Know, Regardless of Location
January 14, 2026
As of January 1, 2026, the Kentucky Consumer Data Protection Act (KCDPA) is officially in force, adding to the growing list of state-specific privacy laws. This act brings new expectations for any dealership that sells to or maintains a business relationship with Kentucky consumers. The law gives residents important rights over their personal data, including the right to access, correct, delete, and obtain a copy of their information, as well as the ability to opt out of targeted advertising, data sales, and certain types of profiling.
For dealerships serving Kentucky consumers, this means your data governance, website practices, and vendor relationships must align with these new requirements. When consumers exercise their rights, dealerships must respond within defined timelines and ensure their systems, including CRM, DMS, and marketing platforms, can support those requests.
For all other dealerships, this should serve as a warning shot about where state legislation is heading. You can get ahead of it by reviewing the key items of the KCDPA, including data security practices and website compliance.
The KCDPA requires “reasonable” data security practices. This is where A2C’s FTC Safeguards Rule–aligned information security framework becomes especially valuable. Dealerships already using A2C’s controls for risk assessment, access management, vendor oversight, encryption and incident response are well positioned to meet Kentucky’s expectations without reinventing their security program.
On the website side, the law requires clear privacy notices, transparent data practices, and mechanisms for consumers to submit requests. Privacy Pillar, A2C’s industry‑leading partner, ensures dealership websites meet these requirements, from compliant disclosures to opt‑out functionality and data‑rights intake workflows.
Kentucky’s new law is another signal that privacy expectations are rising nationwide. Dealerships that take proactive steps now will not only stay compliant, but they’ll also strengthen customer trust where it matters most.
To see how A2C can help your dealership, regardless of your location, meet the growing privacy and information security expectations of your customers, contact us at [email protected] or call us at 844-637-5511.
Matt Vatter
Chief Compliance Officer, Accelerate2Compliance
Why A2C?
Compliance is an incredibly complicated topic, but our solution is the opposite of complicated: it’s just simple. We take the complexities of information security compliance and simplify them, so you can know what you need to do, do it efficiently, then get back to doing what you do best. You’ll get everything you need from us, and that’s all – you will not be paying for extras you DON’T need. We know what we’re doing. As you begin your information security compliance journey with A2C, you can rest assured you’ll be headed down the road to compliance.
Let's Talk
Still need help? Let’s talk! You’ll learn how easy our product is to use and scale, and how we can save you time, money, and stress.
Address:
4737 County Road 101, Suite 146
Minnetonka, MN 55345
Sales:
[email protected]
Support:
[email protected]