HB5 | Kentucky 2014 | AN ACT relating to the safety and security of personal information held by public agencies.

Link to Summary Link to Summary

Link to Full Text Link to Full Text

On April 10, 2014 in the House:

Signed by Governor (Acts, ch. 74)

On March 31, 2014 in the House:

Delivered to Governor
Enrolled, signed by each presiding officer

On March 28, 2014 in the House:

Passed 97-0
House concurred in Senate Committee Substitute

On March 27, 2014 in the Senate:

Posted for passage for concurrence in Senate Committee Substitute

On March 27, 2014 in the House:

Taken from Rules

On March 24, 2014 in the House:

To Rules (H)
Received in House

On March 21, 2014 in the Senate:

3rd reading, passed 38-0 with Committee Substitute

On March 20, 2014 in the Senate:

Posted for passage in the Consent Orders of the Day for Friday, March 21, 2014

On March 19, 2014 in the Senate:

2nd reading, to Rules

On March 18, 2014 in the Senate:

Reported favorably, 1st reading, to Consent Calendar with Committee Substitute

On February 4, 2014 in the Senate:

To State & Local Government (S)

On January 31, 2014 in the Senate:

Received in Senate

On January 30, 2014 in the House:

3rd reading, passed 100-0 with Committee Substitute

On January 28, 2014 in the House:

Placed in the Consent Orders of the Day for Thursday, January 30, 2014
Taken from Rules (H)

On January 24, 2014 in the House:

2nd reading, to Rules

On January 23, 2014 in the House:

Reported favorably, 1st reading, to Consent Calendar with Committee Substitute

On January 21, 2014 in the House:

Posted in committee

On January 13, 2014 in the House:

To State Government (H)

On January 9, 2014 in the House:

Introduced in House

SCS

Retain original provisions, except: make technical corrections; define "individually identifiable health information"; define "nonaffiliated third party" to include persons who have a contract or agreement with an agency and receive personal information under that contract or agreement, but are not necessarily providing services or resources; define "security breach" to include nonaffiliated third parties and consider likelihood of harm to individuals; make Kentucky Board of Education agency responsible for implementing security and breach investigation procedures for public school districts; delete language requiring notification of additional requirements beyond those required under this bill; allow nonaffiliated third parties and agencies 72 hours for security breach notification instead of 24 hours; prohibit private right of action; effective January 1, 2015.

HCS/LM

Retain original provisions, except: require the Department for Local Government to consult with public entities in development of security and breach investigation procedures for local governments; require the Commonwealth Office of Technology to make available technical assistance for the establishment of security and breach investigation procedures upon request of an agency; require agencies to notify appropriate entities when investigation reveals misuse of personal information has not occurred; declare that provisions of the Act do not impact the Open Records Act; make the Act effective January 1, 2015.