Securiti launches Gencore AI, a holistic solution to build Safe Enterprise AI with proprietary data - easily

View
Contact Us See a demo

Navigating the Indiana Consumer Data Protection Act (ICDPA): Key Details

In this infographic, you will learn:

  • Scope, applicability and exemptions under ICDPA,
  • Key definitions and organizational obligations,
  • Data processor responsibilities and data subject rights,
  • Noncompliance penalties and how to operationalize ICDPA.

DOWNLOAD INFOGRAPHIC

Award-winning technology, built by a proven team, backed by confidence. Learn more.

Indiana became the seventh U.S. state to enact its own data protection law, the Indiana Consumer Data Protection Act (ICDPA). The law, closely modeled on Virginia's Consumer Data Protection Act (VCDPA), will take effect on January 1, 2026.

Sponsored by Senator Liz Brown, Senate Bill 5 (SB 5) passed unanimously in the Senate (49-0) in February 2023. After amendments, it was approved by the House and signed into law by Governor Eric Holcomb on May 1, 2023. The ICDPA establishes robust consumer data privacy rights and imposes strict obligations on organizations handling consumer data.

The ICDPA mandates organizations to comply with several key obligations, including purpose limitation, non-discrimination, implementing security measures, obtaining consent, providing privacy notices, and conducting data protection impact assessments. It also provides consumers rights such as access, correction, deletion, data portability, disclosure, and the ability to opt-out of certain data processing activities.

Download Infographic
ICDPA

Frequently Asked Questions

Indiana Consumer Data Protection Act (ICDPA) is Indiana’s state data privacy law. It applies to businesses operating in Indiana or targeting Indiana residents if they meet either of two thresholds: processing or controlling the personal data of at least 100,000 Indiana residents annually or processing or controlling the personal data of at least 25,000 Indiana residents while deriving more than 50% of their gross revenue from selling personal data.

The Indiana Office of the Attorney General has exclusive authority to enforce the ICDPA. Its responsibilities include initiating legal actions to restrain violations, imposing civil penalties, and recovering investigation and preparation costs, including attorney's fees. Before enforcement, the Attorney General must provide a 30-day written notice to the controller or processor specifying the alleged violations.

The ICDPA imposes a civil penalty not exceeding $7,500 for every single violation of its provisions.

All-in-One Solution For Your Business Needs

The Multi-disciplinary practice to grow trust-equity of your brand and comply with privacy regulations

View More

Navigating the New Hampshire’s Data Privacy Law (NHDPA): Key Details

Download the infographic to learn key details about New Hampshire's Data Privacy Law (NHDPA) and simplify your compliance journey with Securiti.

View More

Navigating the Kentucky Consumer Data Privacy Act (KCDPA): Key Details

Download the infographic to learn key details about Kentucky's Consumer Data Privacy Act (KCDPA) and simplify your compliance journey with Securiti.

Effective Timeline of the EU’s AI Act View More

Effective Timeline of the EU’s AI Act

Securiti’s latest infographic provides a detailed breakdown of the EU AI Act’s enforcement timeline and its key dates, making AI Act compliance easier.

View More

Navigating the Montana Consumer Data Privacy Act (MCDPA): Key Details

Download the infographic to learn key details about Montana’s Consumer Data Privacy Act (MCDPA) and simplify your compliance journey with Securiti.

Comparative Analysis of Healthcare Laws: Alberta, Ontario, Quebec View More

Comparative Analysis of Healthcare Laws: Alberta, Ontario, Quebec

Gain insights into Alberta, Ontario, and Quebec healthcare laws. Discover key differences, whom they apply to, regulatory body, notification requirements, rights, etc.

FDBR View More

Navigating Florida’s Digital Bill of Rights (FDBR): Essential Insights

Download the infographic to learn key details about Florida's Digital Bill of Rights (FDBR) and simplify your compliance journey with Securiti.

EU AI Act Battlecard View More

EU AI Act Battlecard

Securiti’s AI Act battlecard is designed as the perfect foundational resource for organizations that want an elementary understanding of the various aspects of AI Act compliance.

The NJDPA does not grant a private right of action, meaning individuals cannot sue under the law. Businesses are allowed a 30-day cure period to address violations. Noncompliance penalties are $10,000 for a first violation and $20,000 for each subsequent violation. View More

Navigating the New Jersey Data Privacy Act (NJDPA): Key Details

Download the infographic to learn key details about the New Jersey Data Privacy Act (NJDPA) and simplify your compliance journey with Securiti.

Navigating the Tennessee Information Protection Act View More

Navigating the Tennessee Information Protection Act (TIPA): Key Details

Download the infographic to learn key details about the Tennessee Information Protection Act (TIPA) and simplify your compliance journey with Securiti.

Cyber Security Legislative Package (CSLP) 2024 View More

Cyber Security Legislative Package (CSLP) 2024: A New Era for Cyber Security in Australia

Download the infographic to gain insights into Australia’s Cyber Security Legislative Package (CSLP). Learn more about how to ensure swift compliance.

What's
New