Indiana Consumer Data Protection Act
Indiana Code, Article 24-15 (in effect since January 1, 2026)
- Applies to
- Businesses that control or process personal data of 100,000 or more Indiana consumers a year, or of 25,000 or more while earning over half their revenue from selling personal data.
- What it asks
- People can confirm, see, correct, delete and get a copy of their data and opt out of targeted advertising, sale and profiling. Businesses answer within 45 days and assess some processing.
- What the software does
- Full-text search finds every document that names a person; permissions and retention schedules control the rest.