HomeFounders News › Regulations

Indiana, Kentucky, Rhode Island consumer privacy laws now in force

Indiana, Kentucky, Rhode Island consumer privacy laws now in force

As of January 1, 2026, comprehensive consumer privacy laws in Indiana, Kentucky, and Rhode Island took effect, bringing 20 US states with active privacy statutes. They require clear privacy notices, opt-in consent for sensitive data, and Data Protection Impact Assessments; penalties reach $7,500 per violation in IN and KY and $10,000 in RI, and Rhode Island offers no cure period.

Why this matters for founders

Any startup collecting consumer data should refresh privacy notices, wire up opt-outs and data-subject request handling, and confirm it isn't over the applicability thresholds now that 20 states enforce.

Source: Koley Jessen

Related updates

More that helps you.

Get briefs like this tuned to you.

In the app, Founder Briefs are personalized to your country, industry and stage, and you can save the ones that matter.

See plans →
FoundersCheckList.AI app
Founders using FoundersCheckList.AI