Camera-related state law

The governing audio statute is KRS 526.020 (eavesdropping). The statute makes intentional overhearing or recording of an oral or wire communication without the consent of a party a Class D felony. Because consent of one party is sufficient, Kentucky is a one-party consent state for audio recording.

Video-only surveillance of common areas with posted notice is generally lawful. KRS 531.090 (video voyeurism) reaches hidden cameras in places where privacy is reasonably expected. Posted notice at the entrance is the industry standard.

Practical translation. Commercial KY camera installs default to video-only on the cameras and route audio capture through a separate documented intercom or call-recording workflow.

Alarm and security contractor licensing

Kentucky licenses alarm system contractors at the state level. The Kentucky Department of Housing, Buildings and Construction within the Public Protection Cabinet administers the program under KRS 198B.6402 et seq. and 815 KAR 10:060. Companies installing alarm systems for compensation must hold a current state license, and individual installers performing covered work must meet the qualification rules.

For commercial buyers, the practical takeaway is that any vendor installing alarm or electronic security in Kentucky should provide a current DHBC license number on the proposal. Buyers can verify the license at dhbc.ky.gov. Louisville Metro and other municipalities require alarm permits on top of state licensure.

Biometric data and breach notification

Kentucky has not enacted a comprehensive consumer privacy law on the model of CCPA, VCDPA, or TIPA as of early 2026. KRS 365.732 is the primary regulatory anchor for biometric records held by businesses. The statute requires notice of breaches affecting personal information, which expressly includes biometric data used for authentication.

For commercial security buyers, the practical reach is fingerprint and facial-recognition access control and any AI camera that builds a faceprint template. Operators document consent at enrollment, retain biometric templates only as long as the operational purpose requires, and apply reasonable safeguards.

Privacy in the workplace

Kentucky does not have a single workplace electronic-monitoring statute. Pure video surveillance of common work areas with posted notice is the routine pattern. Cameras in employee-only spaces with a reasonable expectation of privacy are off-limits.

Most KY employers issue a single workplace surveillance notice in the employee handbook. Audio capture is regulated by KRS 526.020. Manufacturing employers (Toyota, Ford, GE Appliances, bourbon distilleries) commonly add badge-tied access control to production zones.

Video retention requirements

  • Cannabis (medical). Kentucky's medical cannabis program rules at 915 KAR Chapter 1 set retention. Pull the current text before designing the install.
  • Healthcare. HIPAA Security Rule (45 CFR Part 164) governs PHI-touching footage.
  • Retail and hospitality. PCI-DSS Requirement 9 specifies 90-day retention for the cardholder data environment.
  • Bourbon and distilled spirits. KY has the highest density of distilled-spirits production in the US. ATF (TTB) rules and warehousing-bond requirements add coverage and retention expectations.
  • Federal contractors. NDAA Section 889 controls vendor selection.
  • Schools. FERPA reach for K-12 districts and higher education.

Default retention for KY commercial systems with no specific industry rule is 30 days.

What Tec-Tel does to comply with Kentucky regulations

  • Video-only on cameras unless audio is documented with one-party consent under KRS 526.020.
  • Posted surveillance notice at every public entrance.
  • No cameras in restrooms, locker rooms, dressing rooms, or any space where privacy is reasonably expected.
  • Biometric capture documented at enrollment with a written retention and destruction schedule.
  • Retention configured to the regime that governs the industry (HIPAA, PCI, 915 KAR, NDAA, TTB).
  • NDAA Section 889-compliant vendor selection on federal-touching installs.
  • DHBC-licensed alarm contractor work where the install scope triggers KRS 198B.6402.

This is a buyer-facing reference, not legal advice.

Security service in Kentucky

Tec-Tel deploys AI-era security across Kentucky with one accountable project manager owning design, install, and service to one standard. The cities below have local service detail, deal sizing, and a free consultation. Don't see yours? We cover the whole state.

Or browse the full city directory and nationwide coverage map.