Summary of Original Version

Amend KRS 367.3613 to exempt information collected by a health care provider that maintains protected health information in accordance with HIPAA and information included in a limited data set as described in 45 C.F.R. sec.164.514(e); amend KRS 367.3621 to make a technical change to include a data protection impact assessment of processing of personal data for the purposes of profiling where the profiling presents a foreseeable risk of an unlawful disparate impact on consumers.