Who must Comply with the Indiana Consumer Data Protection Act (“ICDPA”)?
The ICDPA applies to entities that conduct business in Indiana or produces products or services that are targeted to residents of Indiana and that during a calendar year:
1. Controls or processes personal data of at least one hundred thousand (100,000) consumers; or
2. Controls or processes personal data of at least twenty-five thousand (25,000) consumers and derives more than fifty percent (50%) of gross revenue from the sale of personal data.
For more information, see here: https://iga.in.gov/laws/2023/ic/titles/24#24-15
These materials were obtained directly from the State Government public websites and are posted here for your review and reference only. No Claim to Original State Government Works. This may not be the most recent version. The State may have more current information. We make no guarantees or warranties about the accuracy or completeness of this information, or the information linked to. Please check the linked sources directly.