Kentucky Gov. Andy Beshear Issues Executive Order to Protect Data Privacy

Kentucky Governor Andy Beshear issued an executive order to protect residents from the harmful impacts of data brokers, according to reports on August 8, 2026. The order aims to limit how personal information is collected and sold, though supporters are now calling for the state legislature to enshrine these protections into permanent law.

Governor Beshear’s Executive Order on Data Privacy

The executive order targets the operations of data brokers, companies that collect personal information from public records and online activity to sell to third parties. According to the Governor’s office, the measure is intended to mitigate the risks associated with the unregulated trade of Kentuckians’ private data.

The order focuses on the “harmful impacts” caused by the proliferation of data brokerage, which can include the exposure of home addresses, phone numbers, and other sensitive identifiers. By utilizing executive authority, Beshear sought to create immediate safeguards for state residents while a more permanent legislative solution is debated.

Calls to Enshrine Data Protections into Law

While the executive order provides immediate administrative relief, advocates and policymakers are urging the Kentucky General Assembly to pass formal legislation. Because executive orders can be rescinded by future administrations, proponents argue that only a statutory law can provide long-term security for consumer privacy.

The push to enshrine these protections into law would likely involve creating a regulatory framework for data brokers, including requirements for registration and the establishment of a process for residents to opt out of data collection. This transition from an executive mandate to a legislative act would move the authority from the governor’s office to the state’s legal code.

Impact of Data Brokerage on Kentucky Residents

Data brokers often aggregate information from social media, voter registration files, and commercial transactions. In Kentucky, the lack of a comprehensive state privacy law has historically left residents with few options to prevent their data from being packaged and sold to marketers, political campaigns, or other entities.

The governor’s action addresses concerns that the unregulated sale of data can lead to increased harassment, identity theft, and privacy intrusions. By labeling these impacts as “harmful,” the administration is framing data privacy as a matter of public safety and consumer protection.