Indiana Becomes 7th State To Enact A Comprehensive Data Privacy Law

On May 1, 2023 the Indiana governor signed the Indiana Consumer Data Protection Act (ICDPA), making Indiana the seventh state to enact a comprehensive data privacy law.

The final form of the ICDPA largely mirrors the Virginia Consumer Data Protection Act (which we covered in detail here), establishing similar consumer data privacy rights and obligations for data controllers, with a few unique provisions.

(1) Applicability: The ICDPA covers persons that conduct business in or produce products or services targeted to the residents of Indiana and who, in a calendar year, either:

a. Control or process the personal data of at least 100,000 consumers who are Indiana residents, or