What is Considered a Sale of Personal Data in the Indiana Consumer Data Protection Act (“ICDPA”)?
Sale of personal data means the exchange of personal data for monetary consideration by a controller to a third party.
(b) The term does not include:
(1) the disclosure of personal data to a processor that processes the personal data on behalf of the controller;
(2) the disclosure of personal data to a third party for purposes of providing a product or service requested by:
(A) the consumer; or
(B) the parent of a child; to whom the personal data pertains;
(3) the disclosure or transfer of personal data to an affiliate of the controller;
(4) the disclosure of information that the consumer:
(A) intentionally made available to the general public via a channel of mass media; and
(B) did not restrict to a specific audience; or
(5) the disclosure or transfer of personal data to a third party as an asset that is part of a proposed or actual merger, acquisition, bankruptcy, or other transaction in which the third party assumes control of all or part of the controller's assets.
Stay Ahead of the Curve! Explore our comprehensive CLIClaw Indiana Privacy Compliance Library for in-depth resources and insights.
These materials were obtained directly from the State Government public websites and are posted here for your review and reference only. No Claim to Original State Government Works. This may not be the most recent version. The State may have more current information. We make no guarantees or warranties about the accuracy or completeness of this information, or the information linked to. Please check the linked sources directly.