Compliance Radar · Privacy and consent
Indiana, Kentucky and Rhode Island privacy laws take effect
Three more state privacy laws started on January 1, 2026, Rhode Island's at 35,000 consumers.
- Status
- In force
- Takes effect
- January 1, 2026. Kentucky's 2026 amendment (HB 692) adds automated content recognition data as sensitive from July 1, 2027.
- Announced
- Enacted 2023 (Indiana) and 2024 (Kentucky, Rhode Island)
- Type
- law
What changed
All three add access, deletion and opt-out rights and require consent for sensitive data. None requires GPC. Rhode Island has no cure period.
Who it affects
Indiana and Kentucky: 100,000+ consumers. Rhode Island: 35,000+, and any site that sells customer data must post a notice.
What to do
- Offer opt-outs of targeted ads and sales in all three states.
- Get opt-in consent for sensitive data.
- Rhode Island: if you sell customer data, list what you collect and who buys it.
What ComplyMo already handles
Page audits and daily re-checks: Growth and up. Everything else: every plan, from $19 a month.
Sources
- Indiana Code art. 24-15 (Consumer Data Protection) (opens in a new tab)
- Kentucky General Assembly: HB 15 (2024), Acts ch. 72 (opens in a new tab)
- Rhode Island Gen. Laws ch. 6-48.1 (opens in a new tab)
- Rhode Island Gen. Laws 6-48.1-3 (disclosure) (opens in a new tab)
Summary of public sources, not legal advice.