Attorney General Russell Coleman has initiated several high-profile actions in 2025, ranging from data‑privacy litigation to consumer protection suits. In a year marked by rising concerns over digital surveillance, algorithmic pricing, and corporate accountability, Kentucky Attorney General Russell Coleman has emerged as one of the most aggressive state enforcers in the nation along with California’s Rob Bonta and New York’s Privacy Enforcer going after businesses who are not respecting data subjects rights. From suing Chinese e-commerce giant Temu for allegedly harvesting user data and violating trade laws, to cracking down on algorithmic rent-fixing by RealPage, Coleman’s office is sending a clear message: Kentucky won’t be a silent bystander in the face of tech-driven exploitation. These actions, while rooted in state law, have national implications—raising urgent questions about data privacy, consumer protection, and the unchecked power of digital platforms.
As more state attorney generals take privacy seriously and comprehensive frameworks come online like the recent inclusion of Minnesota you will only see a rapid rise in these enforcement actions. It is important for business owners to take privacy seriously and to setup the cookie consent management tools, data subject access request software, and privacy policy software supplied by the Captain Compliance team.
AG Coleman Sues Temu: Protecting Kentuckians’ Data
On July 17, 2025, Kentucky’s Attorney General filed suit against Chinese platform Temu in Woodford County Circuit Court. The complaint alleges:
- Illicit collection of personal data without consent
- Sharing of sensitive information with the Chinese government
- Counterfeiting of iconic Kentucky brands like University of Kentucky, Buffalo Trace, Churchill Downs
- Use of forced labor via Chinese ethnic minorities, violating U.S. trade laws
The suit claims Temu became the most‑downloaded U.S. app in 2023 and shares code with Pinduoduo, previously banned as malware. AG Coleman warns Temu “can infect Kentuckians’ devices with malware, steal their personal data and send it directly to the Chinese government.”
Pros of the privacy lawsuit
- Strong consumer data protection effort
- Defends state brands and economy
- Sets precedent against foreign app abuse
Cons of the privacy lawsuit
- Outcome depends on state court process
- Potential backlash or retaliation by Temu
- Limited immediate relief for consumers
Fighting Rental Price-Fixing: RealPage Case
On July 2, 2025 AG Coleman filed suit against RealPage, Inc., alleging antitrust violations and price-fixing harming Kentucky renters. RealPage allegedly used sensitive landlord data—including rent applications, lease terms, and occupancy forecasts—to algorithmically set inflated rent across more than 80% of the market. Approximately 560,000 Kentucky households rent, with 47.5% classified as cost-burdened (spending 30%+ of income on rent). Two privacy lawsuits in 1 month by just 1 state AG and this is just the beginning.
Genetic Data Alert: 23andMe Users in Kentucky
Following the March 2025 bankruptcy of consumer genetic testing firm 23andMe, AG Coleman encouraged Kentuckians to delete their genetic data and saliva samples using their rights under Kentucky’s Genetic Information Privacy Act. He offered step‑by‑step guidance on how to delete data, withdraw consent for research use, and destroy physical samples.
Why It Matters
- Genetic data is deeply personal and sensitive
- 23andMe bankruptcy poses risk of data misuse by new owners
- HIPAA does not apply to direct‑to‑consumer genetic services
Other Notable Actions
- Opioid settlements: $14.4 million secured from eight opioid manufacturers, part of over $1 billion total to date. Funds support prevention, treatment, and recovery programs.
- Vaping law defense: Federal suit challenging Kentucky’s vape restrictions was dismissed, preserving HB 11 and its consumer safeguards.
Expert Opinions & Public Sentiment
| Observer | Affiliation | Comment |
|---|---|---|
| Linn Foster Freedman | Data Privacy & Security Insider | “Temu raises the same kind of privacy red flags as TikTok did.” |
| Dr. Adam Brown | Health Privacy Expert | “There are not many data privacy protections for consumers of these direct‑to‑customer services.” |
What Citizens of Kentucky Are Saying
“Temu seemed cheap at first—but now I worry if it’s tracking everything on my phone.”
“I didn’t know RealPage algorithms set rent so high; glad the AG is suing.”
The Future of Privacy Litigation Enforcement in Kentucky
The Temu case outcome in Kentucky courts will set the tone for future litigation against big players and smaller companies can expect enforcement as well. Monitoring other states’ AG actions relating to Temu and algorithmic platforms Temu should expect more suits to follow for not respecting users privacy. Potential legislative updates on data privacy and genetic information in the face of the 23andMe bankruptcy makes this a sensitive topic at a sensitive time. The AG is following through on opioid settlement fund allocations and is regulation over algorithmic and AI tools is to be expected.
How To Make Your Website Compliant for Kentucky?
Attorney General Coleman’s 2025 actions show a multifaceted approach to protecting Kentuckians—spanning digital privacy, rental equity, public health enforcement, and algorithmic accountability. While litigation may take time, the message is clear: data extraction, price manipulation, and consumer deception will meet resistance. Citizens are now being informed on how to assert their privacy rights and if they don’t they will have the AG fighting for them. Captain Compliance can come in and help with privacy matters and make sure that you are supplying the required consent mechanisms for Kentucky residents.
If you’d like to avoid the Kentucky Attorney General and other states AG book a demo below with one of our privacy and compliance superhero team members.
