Privacy Map

Indiana. Comprehensive data protection. Act

Indiana CDPAIndiana Consumer Data Protection Act (Ind. Code § 24-15)

In force
Partly verifiedMedium confidence. No verification notes recorded.

§1Summary

Synopsis

Follows the Virginia model with access, correction, deletion, portability and opt-outs, sensitive-data consent and data protection assessments.

Key themes
  • consumer rights (access, deletion, correction, portability)
  • opt-out of sale, targeted advertising and profiling
  • sensitive data consent
  • data protection assessments
  • processor contracts
Unique features

Allows a summary of personal data in place of a full copy for access requests; permanent 30-day cure.

SaaS relevance

Applies at 100,000 Indiana consumers, or 25,000 with over 50% revenue from sales.

§2Obligations

Extraterritorial
Yes
Breach notification
See Ind. Code § 24-4.9 (separate statute)
DPO
No
Cross-border transfers
None
Maximum penalty
$7,500 per violation

§3Dates

Key dates
  • Adopted
  • In force

§4Text and authority

Text
Authority
Indiana Attorney General

§5Where it applies

Domestic law of
Indiana

§6Sources and verification

Sources consulted
Verification

Medium confidence.

Partly verifiedMedium confidence. No verification notes recorded.