Kentucky AI Legislation in 2026

The Kentucky Picture

Kentucky has chosen a deliberately narrow and pragmatic path on artificial intelligence, and Senate Bill 4 of 2025 is the centerpiece. Rather than regulating private developers and deployers the way Colorado and Texas have moved to do, Kentucky aimed its first major statute inward, at its own house. SB 4 makes the Commonwealth Office of Technology and a new Artificial Intelligence Governance Committee responsible for how state agencies may acquire, build, and use AI. I read this as a governance-first posture. Kentucky is establishing inventory, approval, disclosure, privacy, and human-oversight expectations across the executive branch before it considers binding rules on the broader market. The emergency clause means these obligations have been live since March 24, 2025, so state vendors and contractors are already operating under them.

For businesses and builders, the practical takeaway is twofold. First, if you sell AI into Kentucky state government, you are now inside a procurement and approval regime. Expect agencies to require disclosure of where and how AI is used, to demand data-privacy and trade-secret protections, and to route consequential AI uses through the Governance Committee. Plan for documentation, transparency, and the annual reporting that the Commonwealth Office of Technology owes the legislature. Second, if you operate in the political or advertising space, the synthetic-media provisions create real civil exposure. Anyone sponsoring electioneering communications that use AI-generated or manipulated media should attach a conspicuous AI disclosure, because that disclosure is the statute's built-in affirmative defense and the sponsor, not the platform, carries the liability.

Outside of state operations and elections, Kentucky's AI exposure for private actors remains limited but not zero. The most significant criminal-law hook is the 2024 House Bill 207, which folded AI-generated and computer-generated child sexual abuse material into Kentucky's felony sex-crime statutes. That law is now being tested in court in 2026, with the Attorney General defending it, so its precise reach may be clarified by litigation. I would treat AI-generated CSAM as squarely and seriously illegal in Kentucky regardless of how the constitutional challenge resolves.

What Kentucky has not done is equally important to state plainly. As of June 2026, Kentucky has no comprehensive private-sector AI law governing high-risk automated decision systems, algorithmic discrimination, or consumer-facing AI broadly. The live policy energy in the 2026 session went to AI data centers and the electricity and ratepayer questions they raise, and even there the proposed data-center regulatory language was stripped before the session adjourned. The legislative AI Task Force continues to study the area, so further bills are plausible, but builders should not assume a sweeping Kentucky AI statute exists today.