State Breach Law

Indiana Data Breach Notification Law

Ind. Code §§ 24-4.9-1-1 to 24-4.9-5-1 • Effective 2006-07-01

Indiana requires you to notify the Attorney General of every breach and notify affected residents without unreasonable delay.

Notification deadline: Without unreasonable delay

Enforcement: Indiana Attorney General

Overview

Indiana requires notification without unreasonable delay. AG notification required for all breaches.

Who Must Be Notified

  • Affected Indiana residents
  • Indiana Attorney General

Covered Data Types

Social Security number, Driver's license number, Financial account numbers, Credit/debit card numbers

Notification Requirements

  • Written or electronic notice
  • Must describe breach

Is your business exposed?

Exemptions

  • Encrypted data
  • HIPAA-covered entities
  • GLBA-covered entities

Penalties

Up to $150,000 per deceptive act

If You Experience a Breach

  1. 1.

    Notify AG immediately

  2. 2.

    Notify affected residents

Official Source

https://www.in.gov/attorneygeneral/

Other State Breach Laws

New York, Texas, Florida

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required