Technology

Create new sections of KRS Chapter 194A to establish the Kentucky statewide health data utility; define terms; establish purposes and a restricted fund for the utility; require the executive director of the Office of Data Analytics to be responsible for the development, implementation, operation, and maintenance of the utility, contract with a consortium of public health colleges to operate and govern the utility, and promulgate administrative regulations to carry out those duties; establish functions and content of utility; create a consortium of public health colleges; establish duties of consortium in operating and governing the utility; establish administration and operation requirements for the consortium; establish the Kentucky Health Information Technology Board; require the board to establish policies and procedures for the sharing and submission of health information, approve data control, governance, and privacy practices, and advise the executive director and the consortium; require the utility's participants to comply with health information sharing and submission requirements within certain timeframes; require the secretary of the Cabinet for Health and Family Services to enforce the mandatory reporting requirements for the utility's participants; establish enforcement powers of secretary including civil penalty assessment; require the consortium and the executive director to make annual reports relating to the utility; amend KRS 194A.030, 194A.101, 194A.103, 194A.095, 205.640, 205.6489, 211.474, 214.375, and 311A.190 to conform; repeal KRS 216.2920, 216.2921, 216.2923, 216.2925, 216.2927, and 216.2929, relating to health data collection; establish timeframe for making initial appointments, and provide for staggered appointments to the board; require the Cabinet for Health and Family Services or the Department for Medicaid Services to seek federal approval if it is determined that such approval is necessary; provide authorization from the General Assembly to make changes in the Medicaid program as required under KRS 205.5372(1); EFFECTIVE, in part, July 1, 2028.

Amend KRS 367.3611, relating to the Kentucky Consumer Data Protection Act, to define "automatic content recognition" and "smart monitor" and to include automatic content recognition data in the definition of "sensitive data"; EFFECTIVE July 1, 2027.

Amend KRS 172.100 and 172.200, relating to county law libraries, to ensure that law library funds can be expended for subscriptions to computer-assisted legal research, internet access, and computers and related equipment.

Create new sections of KRS Chapter 367 to establish requirements to protect minors from AI companion platforms and social media platforms using addictive features and predatory data collection; define terms; require AI companion platforms and social media platforms to refine their age verification for users; prohibit AI companion platforms or social media platforms from maintaining accounts for children without verifiable parental consent; create a private right of action for violations by AI companion platforms or social media platforms; authorize the Attorney General to enforce violations.

Create a new section of KRS Chapter 39G to define "center," "executive director," "foreign enterprise," and "resident of the Commonwealth"; prohibit a resident of the Commonwealth from engaging in a transaction with a foreign enterprise if the transaction would result in foreign control of intellectual property, infrastructure, technology, or assets critical to the economic security of the Commonwealth, obstruction of counter-intelligence efforts, or would compromise the economic security of the Commonwealth; require the Kentucky Intelligence Fusion Center to review and investigate a transaction between a foreign enterprise and a resident of the Commonwealth; require the center to notify the executive director of the Kentucky Office of Homeland Security once it has determined that a transaction would compromise the economic security of the Commonwealth; require the center to refer the matter to the appropriate federal authorities if a transaction would compromise the security of the United States; allow the center to contact other state and local agencies and access state and local databases if necessary in pursuit of a review or an investigation; require the center to assess whether the transaction between a foreign enterprise and a resident of the Commonwealth would pose a threat to the security of the Commonwealth, the level of threat the transaction would pose, whether that threat has been mitigated, whether the transaction is with or on behalf of a foreign government, and whether a foreign entity may obtain control of critical infrastructure, technology, or assets critical to the economic security of the Commonwealth; require the center to refer the matter to the Attorney General and notify the executive director of the Kentucky Office of Homeland Security if it determines that the transaction would pose as a threat to the Commonwealth and the threat cannot be mitigated; require the center to meet with the co-chairs of the Legislative Oversight and Investigations Committee at least twice a year to discuss any findings in its review or investigations that would compromise the economic security of the Commonwealth; allow either co-chair of the Legislative Investigations and Oversight Committee to compel additional meetings; require the co-chairs of the Legislative Oversight and Investigations Committee to have required security clearance before meeting with the center; prohibit the center from meeting with the co-chairs if neither have obtained the required security clearance; exempt the meeting between the center and the co-chairs of the Legislative Oversight and Investigations Committee from the Kentucky Open Meetings Act and exempt any records produced in the meeting from the Kentucky Open Records Act; require center to submit an annual report to the Legislative Oversight and Investigations Committee; exempt certain data from the report from the Kentucky Open Records Act; exempt certain data from the report from the Kentucky Open Meetings Act; direct that the first report to the Legislative Oversight and Investigations Committee be issued by July 1, 2027.

Create new sections of KRS Chapter 367 to define terms; restrict the use of artificial intelligence by certain licensed professionals in therapy and psychotherapy services; prohibit licensed professionals from using artificial intelligence to assist in providing supplementary support in therapy or psychotherapy services where the client's therapeutic session is recorded; provide exceptions; prohibit advertising or offering therapy or psychotherapy services unless the therapy or psychotherapy services are conducted by a licensed professional; limit how a licensed professional may use artificial intelligence; require all records between a licensed professional and a patient to be confidential; grant enforcement authority to the relevant board; exclude religious counseling, peer support, and self-help materials; EMERGENCY.

Create a new section of KRS Chapter 158 to define terms; establish the robotics competition fund; establish the Robotics Funding Selection Committee to award grants from the fund to eligible robotics teams competition sponsors; establish committee membership, duties, and set terms; require the Kentucky Department of Education to promulgate administrative regulations to establish procedures for grant applications and distribution of awards by April 1, 2027; set requirements for grant applications; require annual report by August 1 to Legislative Research Commission; provide for initial staggering of appointments; require the committee to hold its first meeting by October 15, 2026; provide that the Act may be cited as the Advanced Manufacturing Through Robotics Education Act.