State Guide
Indiana Privacy & Data Security Laws
Every statute below can apply to a business handling Indiana residents' data, depending on your revenue, the number of Indiana consumers you process, and what kind of data you collect. This is a general reference, not a determination for your specific business — run the full questionnaire to see which of these actually apply to you.
Comprehensive Privacy Law · 1
Applies at 100,000+ Indiana consumers, or 25,000+ if 50%+ of revenue comes from selling personal data.
Ind. Code Art. 24-15Read statute →
Data Security & Breach Notification · 1
Requires "reasonable procedures" to protect and secure personal information, plus secure disposal. Applies regardless of company size whenever you hold covered personal information about a resident of this state.
Ind. Code § 24-4.9-3-3.5Read statute →