Although the Kentucky data breach law does not require an Information Holder to notify the Kentucky Attorney General or other state regulator, the Information Holder must notify the consumer reporting agencies without unreasonable delay if it notifies more than 1,000 Kentucky residents at one time.