POLISCOPE
Back to bills
Part ofData Privacy →

The civic record

Read. Follow. Verify.
HB 633KENTUCKYSession 2026RSState Billdead
Did Not Advance

Kentucky Bill Establishes Data Privacy Regulations and Child Safety Rules for Online Services

Original title: AN ACT relating to data privacy.

Last action · February 20, 2026: to Small Business & Information Technology (H)Sponsor: Vanessa Grossl

Bill progressHistory & official text ↓
Introduced
Committee
Floor Vote
Passed
Law

Track this bill to get notified when it advances a stage. One tap to stop, anytime.

Public stanceCommunity reactions are separate from the official record and reporting.

What This Bill Proposed

Kentucky HB 633 establishes comprehensive data privacy and online safety mandates for s operating in the state, specifically restricting data collection, algorithmic feeds, and targeted advertising for minors under eighteen. The bill requires the highest level of default privacy settings for minors, prohibits certain algorithmic recommendations connecting adults to minors, and mandates a 15-day compliance window for data deletion requests beginning upon enactment.

Why it matters

Online service providers meeting specific consumer thresholds must overhaul their default platform settings, notification delivery schedules, and parental control mechanisms for minor accounts or face regulatory enforcement.

Who It Would Have Affected

Groups the bill's text would have affected, as described in the record. Being affected is not a position for or against it.

Directly affected

covered online service

Covered online services must configure default privacy settings to the highest level for minors, comply with data deletion requests within 15 days, restrict algorithmic recommendations, and modify push notification schedules.

Directly affected

covered minor

Covered minors receive automatic highest-level privacy settings, enhanced blocking and deletion tools, restriction of targeted advertising, and limited notification hours.

Directly affected

parent

Parents gain the ability to request data deletion on behalf of their child, manage privacy and account settings, restrict financial transactions, and place time limits on the child's use of covered online services.

Key Facts

  • Covered online services must configure all default privacy settings for covered minors to the highest level of privacy.
  • Covered online services must disable by default all interaction counts, including reactions and comments, on a minor's media.
  • Online services must comply with a minor or parent's request to delete account profiles, media, and personal data within fifteen days of receiving the request.
  • Covered online services are prohibited from using an algorithmic recommendation system to recommend adult-to-minor connections or direct messaging by default.
Show all 8 facts
  • The bill prohibits targeting minors with advertisements for narcotic drugs, tobacco products, gambling, and alcohol.
  • Notifications and push alerts to a covered minor are prohibited between the hours of 10 p.m. and 6 a.m., and between 8 a.m. and 4 p.m. on weekdays from August 1 to May 31.
  • The legislation applies to persons conducting business in Kentucky or targeting state residents who control or process personal data of at least 100,000 consumers, or 25,000 consumers while deriving over 50 percent of gross revenue from data sales.
  • Section 2 of the Act may be cited as the Kentucky Kid’s Code.

Frequently Asked Questions

Which online services are subject to these new data privacy requirements?
The rules apply to s that conduct business in Kentucky or target state residents, and which process personal data of at least 100,000 consumers annually, or 25,000 consumers while deriving over 50 percent of gross revenue from selling personal data.
What restrictions are placed on push notifications for minors?
s must not send push notifications by default, and are prohibited from sending push alerts or notifications to a covered minor between 10 p.m. and 6 a.m., and between 8 a.m. and 4 p.m. on weekdays from August 1 to May 31.

What else do you want to know?

News Coverage

No news coverage found yet. Articles are indexed twice daily.

Follow the record

Votes, people, money & the original source

Where This Stands

This bill did not become law - Died at adjournment · in House committee.

Procedural history

2 actions
  1. Feb 20, 2026HouseCommittee
    to Small Business & Information Technology (H)
  2. Feb 12, 2026HouseIntroduced
    introduced in House to Committee on Committees (H)

Version history

Only one version on file - nothing to compare yet. As later stages (committee substitute, engrossed, enrolled) are captured, the redline appears here.

View official text →

Lobbying Activity

No state lobbying filings in our records match this bill. Federal lobbying reports (LDA) cover Congress, so they are not listed on state bills.

Full breakdown

Who this bill affects and the strongest case for and against it, written only from the bill’s own text.

Sponsors

Vanessa GrosslHouse · District 88RepublicanPrimary sponsor

Connected Entities

General Assembly, Federal Trade Commission, United States Department of Health and Human Services
OrganizationGeneral Assembly“Enacting body of the Commonwealth of Kentucky”Map →
OrganizationFederal Trade Commission“Federal agency determining unfair or deceptive acts or practices under 15 U.S.C.”Map →
OrganizationUnited States Department of Health and Human Services“Issues privacy, security, and breach notification rules pursuant to HIPAA”Map →

Sources

Open source document

apps.legislature.ky.gov

Analysis Score

0–100
  • Significance20
    Lowered because this bill did not pass (its text scored 80)
  • Controversy65
    Intensity of disagreement among stakeholders
  • Entertainment10
    Compellingness for a non-policy-wonk reader
  • Buzz40
    Current news / social attention level

Publisher tools

Share or embed this record

POLISCOPE publisher tools

Share or embed this record