Indiana Privacy Compliance Checklist

Indiana Consumer Data Protection Act — Step-by-step guide to compliance

Compliance Steps

Effective: January 1, 2026 | Cure period: 30 days

1
Assess whether your organization meets the INCDPA applicability thresholds
2
Update privacy notices to include all INCDPA-required disclosures about data processing and consumer rights
3
Implement opt-out mechanisms for data sales, targeted advertising, and profiling
4
Obtain opt-in consent before processing sensitive personal data
5
Establish consumer rights request processes with a 45-day response window
6
Create an appeals process for denied consumer rights requests
7
Review data processor agreements to include INCDPA-mandated provisions

Key Enforcement Details

Enforced By

Indiana Attorney General

Penalty / Violation

$7,500

Cure Period

30 days

Private Right of Action

Disclaimer: PrivacyLawMap provides general information about US state privacy laws for educational purposes only. This is NOT legal advice. Privacy laws are complex and frequently amended. Consult with a qualified privacy attorney for advice specific to your business. PrivacyLawMap makes no warranties about the accuracy or completeness of this information.