SECURITY ADDENDUM (ENTERPRISE SAAS)
Kentucky Jurisdictional Version
KEY PROVISIONS
Data Breach Notification (KRS Section 365.732)
- Notify without unreasonable delay
- Notify credit reporting agencies if >1,000 affected
- Written notice with description, type of info, contact info
Kentucky Consumer Data Protection Act (KRS Section 367.700 et seq.)
- Effective January 1, 2026
- Consumer rights: access, correction, deletion, portability, opt-out
Personal Information Definition
Name with: SSN, driver's license, financial account with access code.
Trade Secrets
KRS Section 365.880 et seq.
E-Signatures
KRS Section 369.101 et seq.
Late Payment
8% default (KRS Section 360.010)
Forum
Kentucky (exclusive). Jury waiver permitted.
EXECUTION
☐ Master Agreement referenced ☐ Kentucky-licensed counsel review