On January 1, 2026, broad new privacy laws will take effect in Kentucky, Indiana, and Rhode Island, granting consumers in those states greater control over their personal data. With these additions, 19 states now have comprehensive privacy laws in place, which is a significant shift in the data privacy landscape since California led the way in 2018 with the
Kentucky
Kentucky AG Sues Temu for “Stealing Kentuckians’ Data”
Following in the footsteps of almost two dozen attorneys general in other states, Kentucky Attorney General Russell Coleman filed a lawsuit on July 17, 2025, against Chinese online shopping platform Temu, alleging that it unlawfully collects Kentuckians’ data, violating their privacy, and counterfeiting “some of Kentucky’s most iconic brands.”
The complaint alleges that Temu:…
TikTok’s Legal Woes from State AGs Continues
Last week, we outlined the lawsuits against TikTok by New York, California, and North Carolina, that followed in the footsteps of Nebraska, Nevada (which filed suit against TikTok in February of 2024), and Indiana, which filed suit against TikTok in 2022. Since last week, at least 11 more states have joined the fray, including…
Senators Demand Documentation from TikTok
On October 11, 2024, following the filing of a lawsuit against TikTok by the Kentucky Attorney General, Senators Richard Blumenthal (D-CT) and Marsha Blackburn (R-TN), who authored the bipartisan “Kids Online Safety Act,” requested that TikTok CEO Shou Chew provide all “documents, communications, and research held by TikTok regarding the safety of minors on…
Privacy Tip #339 – Scammers Take Advantage of Disaster Victims
Seeing the victims in Kentucky following the devastating floods is heartbreaking. Even more distressing is seeing those who are trying to help by donating funds to the relief effort victimized as well.
Scammers know that people with good hearts who are trying to help others are susceptible to relief scams. All they are trying to…
Kentucky is The Latest State to Adopt the NAIC Insurance Data Security Model Law
Kentucky Governor Andy Beshear recently signed House Bill 474 to become the latest state to enact data insurance security legislation. The new law is modeled after the data security law of the National Association of Insurance Commissioners (NAIC). Licensees with more than 50 employees who are authorized to operate, or are registered under the insurance…
CafePress to Pay $2 Million in Multi-State Data Breach Settlement
On December 18, seven states have entered into a settlement agreement with e-retailer Cafe-Press for $2 million stemming from a 2019 data breach that exposed information of approximately 22 million consumers. The breach affected consumers’ personal information, including usernames and passwords, Social Security numbers, and/or Taxpayer Identification numbers.
Of the $2 million, $750,000 will be…
GozNym Malware Attack Hits Two Law Firms for Over $117K in Losses
Two law firms were among the latest victims of the GozNym malware attack that caused a combined loss of more than $117,000. Law enforcement authorities recently announced the dismantling of a cybercrime network that used this GozNym malware to attempt to steal an estimated $100 million from victims in the United States and around the…
Drones and Personal Privacy
Imagine that you are sitting in your backyard and a drone flies overhead. It hovers. The camera adjusts and looks right at you. Then it flies away. You are left wondering who is operating it and why. On a number of occasions, similar encounters with unknown drones had led to visceral (sometimes even violent) reactions…
All You Need to Know About Flying Your Drone During the Solar Eclipse
Next week, on August 21, a total solar eclipse (or the alignment of the sun, moon and earth), visible from the continental U.S., will take place for the first time in 38 years. The last time this cosmic event occurred, there were no battery-powered supercomputers—smartphones—in your hand to fly a self-stabilizing, GPS-guided aircraft with a…