---
title: "Indiana privacy law (ICDPA): applicability"
canonical: "https://dposchool.com/state-privacy-laws/state/indiana/applicability"
source: "https://iga.in.gov/ic/2026/Title_24.pdf"
text_as_of: "2026-10-28"
last_reviewed: "2026-10-29"
language: "en-US"
publisher: "DPO School"
---

Indiana Consumer Data Protection Act

# Indiana privacy law (ICDPA): applicability

Law as of October 28, 2026 · [Reviewed by Sergio Maldonado Elvira on 29 October 2026](https://dposchool.com/state-privacy-laws/about#review)

## Summary (not the statute text)

The Act applies to persons doing business in Indiana or targeting its residents that, in a calendar year, handle personal data of at least 100,000 Indiana consumers, or at least 25,000 while earning more than 50% of gross revenue from selling personal data. Financial institutions and GLBA data, HIPAA covered entities and business associates, nonprofits, higher education institutions, public utilities and certain insurance-fraud organisations are exempt as entities.

## Key points

1. Thresholds: 100,000 Indiana consumers, or 25,000 plus more than 50% of gross revenue from sales, in a calendar year.

   Section: [IC 24-15-1-1(a)](https://iga.in.gov/ic/2026/Title_24.pdf)

2. GLBA: financial institutions and affiliates, or data subject to GLBA Title V, are exempt.

   Section: [IC 24-15-1-1(b)(2)](https://iga.in.gov/ic/2026/Title_24.pdf)

3. HIPAA covered entities and business associates are exempt as entities; protected health information is exempt as data.

   Section: [IC 24-15-1-1(b)(3); IC 24-15-1-2(1)](https://iga.in.gov/ic/2026/Title_24.pdf)

4. Nonprofits and institutions of higher education are exempt as entities.

   Section: [IC 24-15-1-1(b)(4)-(5)](https://iga.in.gov/ic/2026/Title_24.pdf)

5. Public utilities and their service companies are exempt, and since P.L. 236-2025 so are certain 501(c)(4) insurance-fraud organisations.

   Section: [IC 24-15-1-1(b)(6)-(7)](https://iga.in.gov/ic/2026/Title_24.pdf)

6. Employment-context data and other regulated data types are exempt.

   Section: [IC 24-15-1-2](https://iga.in.gov/ic/2026/Title_24.pdf)

## Sources

- [Indiana Code 2026, Title 24, Article 15 (Consumer Data Protection), with history lines](https://iga.in.gov/ic/2026/Title_24.pdf)

[Compare applicability across all states](https://dposchool.com/state-privacy-laws/topic/applicability)

## Status

Law as of October 28, 2026.

[Reviewed by Sergio Maldonado Elvira on 29 October 2026](https://dposchool.com/state-privacy-laws/about#review). Prepared from the official sources listed.

[Official text of the Indiana statute](https://iga.in.gov/ic/2026/Title_24.pdf)

Reference material, not legal advice.

## Other topics for Indiana

- [Consumer rights](https://dposchool.com/state-privacy-laws/state/indiana/consumer-rights)
- [Sensitive data](https://dposchool.com/state-privacy-laws/state/indiana/sensitive-data)
- [Controller duties](https://dposchool.com/state-privacy-laws/state/indiana/controller-duties)
- [Processors](https://dposchool.com/state-privacy-laws/state/indiana/processors)
- [Enforcement](https://dposchool.com/state-privacy-laws/state/indiana/enforcement)

## Navigation

[US State Privacy Laws](https://dposchool.com/state-privacy-laws) / [Indiana](https://dposchool.com/state-privacy-laws/state/indiana) / Applicability

Next: [Consumer rights](https://dposchool.com/state-privacy-laws/state/indiana/consumer-rights)

Learning US privacy law? An audio course on the privacy law that applies to US businesses: [US Privacy in Practice](https://dposchool.com/learn/courses/us-privacy-in-practice). More from [DPO School](https://dposchool.com).

## For AI agents

- Machine-readable index: https://dposchool.com/state-privacy-laws/llms.txt
- JSON API: https://dposchool.com/state-privacy-laws/api/v1/index.json
- Vendor privacy and security facts: https://vendor.watch (API for agents)
- Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api
- Legal services from a California law firm, through its MCP server: https://northend.law/agents