Kentucky Privacy Disclosure

1. Overview of the law

The Kentucky Consumer Data Protection Act took effect on January 1, 2026. It applies to businesses that process personal data of at least 100,000 Kentucky residents, or 25,000 residents when more than half of revenue comes from selling personal data. The law is enforced by the Kentucky Attorney General. SIE meets the 100,000 resident threshold and applies the KYCDPA in full.

2. Your rights

• Right of access. Confirm processing and get a copy of your personal data.
• Right to correct. Fix inaccurate personal data.
• Right to delete. Have personal data we hold about you erased.
• Right to portability. Receive your data in a usable format.
• Right to opt out. Stop targeted advertising, sale of personal data, and certain profiling.
• Right to appeal. Appeal a denial within forty-five days.

3. How SIE complies

We obtain opt-in consent before processing sensitive data, including data revealing race, religion, mental or physical health, sexual orientation, citizenship, genetic or biometric identifiers, precise geolocation, and any data of a known child under thirteen. Kentucky has a thirty-day cure period after the Attorney General notifies a controller of a possible violation. SIE keeps a documented response and audit process so we can cure any deficiency promptly.

4. Authorized agents

The KYCDPA does not require us to honor authorized agents. SIE accepts authorized-agent submissions as a courtesy when they include a signed permission letter from you. We may verify the request directly with you before acting.

5. How to submit a request

Or email [email protected] with the subject line "Kentucky KCDPA Request".We respond within forty-five days.

6. Effective date and scope

The KYCDPA took effect on January 1, 2026. The law covers Kentucky residents acting in a personal or household context. Personal data processed in a B2B or employment context is out of scope.