Theft of Identity and Trafficking in Stolen Identities (criminal offense and civil action)
KY Identity Theft
Data security · Biometric · Other
Criminalizes knowingly possessing or using another person's identifying information, including name, SSN, account PINs, and unique biometric data, to impersonate them for gain, credit transactions, evading detection, or commercial or political benefit. Victims have a civil cause of action for compensatory and punitive damages and fees.
- Where
- Kentucky
- Citation
- KRS 514.160; KRS 514.170; KRS 411.210 (created 2000 Ky. Acts ch. 174; amended 2002 Ky. Acts ch. 175)
- Status
- In force
- In force since
- 2000-07-14
- Last amended
- 2002-07-15
- Enforced by
- Prosecutors; victims via civil action; Consumer Protection Act enforcement for repeat business violators
- People can sue
- Yes
- Penalties
- Theft of identity is a Class D felony, with forfeiture of any benefit obtained; a business that violates the section more than once also violates the Consumer Protection Act. Victims may recover compensatory and punitive damages, costs, and attorney's fees within five years of discovery.
- Applies to
- Any person or business that knowingly possesses or uses another's identifying information to impersonate them for financial, benefit, evasion, or commercial or political purposes
Practices it requires
- Do not knowingly possess or use another person's current or former identifying information, including biometric data, with intent to represent oneself as that person for property, benefits, financial or credit transactions, evading detection, or commercial or political benefit.KRS 514.160(1)
Other duties
- A business that violates the identity theft statute more than once also violates the Kentucky Consumer Protection Act.KRS 514.160(2)
- Victims may sue for compensatory and punitive damages, costs, and attorney's fees within five years of discovering the violation.KRS 411.210
Sources
Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.
Unverified: KRS 514.170 (trafficking in stolen identities) and KRS 434.872/434.874 (computer offenses also covered by the civil action) were identified by title and cross-reference only.
Research reference, not legal advice.