What's Happening?
Indiana Attorney General Todd Rokita has unveiled the state's new Consumer Data Protection Bill of Rights, designed to prepare residents for the upcoming Indiana Consumer Data Protection Act, set to take effect in January 2026. The bill of rights aims
to empower Hoosiers by outlining 15 protections, including the ability to delete personal data held by companies, opt out of targeted advertising, and request data in a portable format. The law, passed unanimously by Indiana's General Assembly in 2023, marks a significant step in consumer data privacy, allowing individuals to demand transparency and corrections from companies regarding their data. However, Rokita criticized exemptions for nonprofits, utilities, banks, and entities covered by HIPAA, questioning their exclusion from the law's requirements.
Why It's Important?
The introduction of the Consumer Data Protection Bill of Rights is a pivotal moment for data privacy in Indiana, reflecting a growing trend towards enhanced consumer rights in the digital age. By granting individuals more control over their personal information, the law aims to address longstanding concerns about data misuse and privacy violations. This development is significant for businesses operating in Indiana, as they will need to adapt their data handling practices to comply with the new regulations. The law's enforcement could lead to increased accountability and transparency in how companies manage consumer data, potentially influencing similar legislative efforts in other states. Consumers stand to gain greater protection and control over their personal information, fostering trust in digital transactions.
What's Next?
As the law approaches its implementation date, companies in Indiana will need to ensure compliance with the new requirements, including providing clear privacy notices and responding to consumer requests within 45 days. The Attorney General's office plans to enforce the statute as written, with potential recommendations for lawmakers during the 2026 session. Violators could face injunctions and fines of $7,500 per incident, emphasizing the importance of adherence to the law. The Consumer Protection Division will rely on consumer complaints and staff reviews to monitor compliance, potentially leading to adjustments in business practices across the state.
