Indiana Data Removal Guide (2026)
Indiana's Consumer Data Protection Act took effect January 2026. INCDPA is closely modelled on Virginia's VCDPA, consumer rights are broadly similar, with a few narrower provisions.
At a glance
- Comprehensive state privacy law
- Yes, INCDPA
- Broker response deadline
- 45 days from verifiable request
- Enforcement
- Indiana Attorney General. Consumer Protection
- Residents
- 6.8M (approx.)
Indiana Consumer Data Protection Act (INCDPA)
INCDPA applies to controllers processing data of 100,000+ Indiana consumers or 25,000+ while selling data. Rights include delete, access, correct, port, and opt-out of sale, targeted advertising, and profiling. Enforcement is exclusive to the AG with a 30-day cure period and civil penalties up to $7,500 per violation.
Read the full INCDPA explainer →Thresholds, penalties, cure period, private right of action, enforcement history.
What rights do Indiana residents have?
- →Delete, access, correct, port, opt-out
- →AG enforcement, no private right of action
Where does your data leak from in Indiana?
Data brokers don’t guess your address — they scrape specific public-record sources. The ones most relevant in Indiana:
- Indiana MyCase public record search
- Marion, Lake, Allen County property records
- Indiana BMV records
Ready to remove
Opt out of 500+ brokers for $7
OfflistMe drafts a legally compliant deletion email citing INCDPA for every broker. You send from your own inbox. No account, no ID upload.
Start for $7 →What if a broker ignores your request?
If a broker does not respond within 45 days, file a complaint with the Indiana Attorney General. Consumer Protection. The enforcement authority can assess civil penalties and compel compliance.
File a complaint with Indiana Attorney General. Consumer Protection ↗FAQ: Indiana data removal
How is INCDPA different from Virginia's VCDPA?+
Substantively similar. Both have no private right of action, similar scope thresholds, and VA-style deletion rights. Differences are narrow: INCDPA has a longer cure period (30 days vs 30 days per VA), and enforcement mechanics are slightly different, but consumers experience nearly identical rights.