KY HB633

Amends Kentucky's existing data privacy law (KRS 367.3611-367.3629) to add extensive protections for minors under 18, creating the "Kentucky Kid's Code"

Requires covered online services to configure default privacy settings to highest protection level for minors, disable interaction counts by default, and provide tools to opt out of algorithmic feeds, limit screen time, and control in-app purchases

Prohibits online services from using algorithmic systems to recommend that adults connect with minors, facilitating targeted advertising to minors, using dark patterns directed at minors, and sending push notifications during nighttime hours (10 p.m.-6 a.m.) or school hours (8 a.m.-4 p.m. on weekdays, August 1-May 31)

Mandates parental controls for children under 13, including ability to manage privacy settings, restrict purchases, view time spent on services, and limit access during school hours and nighttime

Applies to businesses processing data of 100,000+ consumers annually or deriving 50%+ of gross revenue from selling/sharing personal data; exempts government agencies, nonprofits, financial institutions subject to Gramm-Leach-Bliley, HIPAA-covered entities, and higher education institutions