“The SECURE Data Act does not include requirements for impact assessments or classify smart TV data as sensitive, both of which are included in Kentucky's privacy law.”