by Nick Palmiere, Baker Botts L.L.P. - JD Supra

Ahead of implementation of Indiana's comprehensive data privacy law, Indiana’s Attorney General has released a Consumer Data Privacy Bill of Rights describing how the Indiana Consumer Data Protection Act ("ICDPA"), enacted in 2023, will operate when it takes effect on January 1, 2026. Although styled for consumers, the Bill of Rights functions as a practical compliance roadmap for businesses subject to the law. It reiterates the ICDPA’s scope and thresholds, articulates the core consumer rights, and underscores concrete controller obligations around transparency, data minimization, purpose limitation, sensitive data handling, and response timelines.