Student data privacy laws, contacts, and resources for Kentucky. Browse all states for more complete ecosystem guides.
FERPA
Ky. Rev. Stat. Ann. §§ 367.3611 et seq.; HB 232 (KY Rev St § 365.734)
Mandatory breach notification; cloud services prohibited from commercial use of data; requires AI disclosure in public decision-making.
Mandatory breach notification; cloud services prohibited from commercial use of data; requires AI disclosure in public decision-making.
2025 Senate bill passed to regulate state government's use of AI. KDE guidance: AI-directed, AI-supported, and AI-empowered learning paradigms.
Every state has a public records law, the Kentucky equivalent of a FOIA request. Parents, educators, and advocates can use these laws to request records about software agreements, data-sharing practices, and AI tool approvals.
Records access is privacy in action. Knowing what agreements exist, and being able to verify them, is the first step in holding districts accountable.
Search vendor and product DPAs by company, product, or district from the SDPC registry.
Districts that go from single-digit to 90%+ compliance do it by building the right infrastructure: standardized DPAs, a public registry, and clear governance frameworks. We can help your state do the same.
Take the ABYA Privacy & AI Governance training course to build your district's compliance readiness.
Start training →