INDIANAPOLIS — Indiana’s new consumer data privacy law begins enforcement Thursday, Jan. 1, giving residents expanded control over their personal information and placing new requirements on businesses that collect and process large amounts of data.
The statute, approved in 2023, has been the focus of years of preparation as companies worked to update systems and policies before enforcement begins through the state attorney general’s office.
The law applies to organizations that handle data for more than 100,000 Indiana residents or those that process information for at least 25,000 residents while earning more than half of their revenue from data sales. It grants consumers the right to access, correct and delete personal data, as well as opt out of data sales and targeted advertising. The statute also requires data controllers to limit collection to what is necessary, strengthen security practices and evaluate potential risks through impact assessments…