KRS 393A.770: Definitions -- Applicability.

(1) As used in KRS 393A.770 to 393A.830, "personal information" means:

(a) Information that identifies or reasonably can be used to identify an individual,

such as first and last name in combination with the individual's:

1. Social Security number or other government-issued number or identifier;

2. Date of birth;

3. Home or physical address;

4. Electronic-mail address or other online contact information or Internet

provider address;

5. Financial account number or credit or debit card number;

6. Biometric data, health or medical data, or insurance information; or

7. Passwords or other credentials that permit access to an online or other

account;

(b) Personally identifiable financial or insurance information, including nonpublic

personal information defined by applicable federal law; and

(c) Any combination of data that, if accessed, disclosed, modified, or destroyed

without authorization of the owner of the data or if lost or misused, would

require notice or reporting under KRS 365.720 to 365.730 and federal priva cy

and data security law, whether or not the administrator or the administrator's

agent is subject to the law.

(2) Any provision of KRS 393A.770 to 393A.830 that applies to the administrator or

the administrator's records applies to an administrator's agent or the agent's records.