Student data privacy laws, contacts, and resources for Kentucky. See Utah for a complete district-by-district guide.
FERPA
Ky. Rev. Stat. Ann. §§ 367.3611 et seq.; HB 232 (KY Rev St § 365.734)
Mandatory breach notification; cloud services prohibited from commercial use of data; requires AI disclosure in public decision-making.
Mandatory breach notification; cloud services prohibited from commercial use of data; requires AI disclosure in public decision-making.
2025 Senate bill passed to regulate state government's use of AI. KDE guidance: AI-directed, AI-supported, and AI-empowered learning paradigms.
Every state has a public records law — the Kentucky equivalent of a FOIA request. Parents, educators, and advocates can use these laws to request records about software agreements, data-sharing practices, and AI tool approvals.
Records access is privacy in action. Knowing what agreements exist — and being able to verify them — is the first step in holding districts accountable.
Utah went from 8% to 92% compliance across 150+ LEAs by building the right infrastructure — standardized DPAs, a public registry, and clear governance frameworks. We can help your state do the same.
Take the ABYA Privacy & AI Governance Certification to demonstrate your district's compliance readiness.
Start certification →