Skip to main content
INCDPA · Effective 2026-01-01

Indiana Data Removal Guide (2026)

Indiana's Consumer Data Protection Act took effect January 2026. It gives covered consumers access, correction, deletion, portability, and opt-out rights, subject to the statute's scope, exemptions, and request rules.

Research status: published state guide pending fresh official-source re-verification.

This page is educational orientation, not legal advice. Scope, exemptions, deadlines, penalties, regulator powers and broker routes can change. Verify the current statute and state regulator guidance before relying on a right or deadline.

Rahul Kandoriya
Written byRahul Kandoriya·Founder, OfflistMe·Last updated August 13, 2026

At a glance

Comprehensive state privacy law
Recorded: INCDPA
Broker response deadline
45 days in this research snapshot for qualifying requests; extensions and exemptions may apply
Enforcement
Indiana Attorney General. Consumer Protection

Indiana Consumer Data Protection Act (INCDPA)

INCDPA applies to a person doing business in Indiana or targeting Indiana residents that meets either the 100,000-consumer branch or the 25,000-consumer-plus-more-than-50%-sale-revenue branch, subject to exemptions. Rights include access, correction, deletion, portability, and opt-outs from sale, targeted advertising, and certain profiling. Controllers generally respond within 45 days, with a possible 45-day extension, and decide appeals within 60 days. The Attorney General has exclusive enforcement authority, with a 30-day written notice-and-cure process and penalties up to $7,500 per violation; there is no private right of action.

Read the full INCDPAexplainer →Scope, thresholds, exceptions, cure rules, and enforcement details where documented.

What rights do Indiana residents have?

  • Access, correct, delete, port, opt out of sale, targeted advertising, and certain profiling
  • 45-day response, possible 45-day extension, and 60-day appeal decision
  • AG enforcement, no private right of action

Where does your data leak from in Indiana?

The FTC explains that people-search sites may combine public records, public social profiles, and information from other brokers. The examples below are a research snapshot, not an exhaustive or person-specific source map for Indiana:

  • Indiana MyCase public record search
  • Marion, Lake, Allen County property records
  • Indiana BMV records

Generate requests in under 60 seconds

Generate requests for 1009 US/global broker workflows for $9

OfflistMe prepares user-reviewed request drafts for the selected catalog routes. You choose the jurisdictional wording, review each draft, and send or submit it yourself; broker verification and outcomes remain outside OfflistMe's control.

What if a broker ignores your request?

If a qualifying request does not receive a response within the applicable window, review the current extension and exemption rules, then consider the Indiana Attorney General. Consumer Protection complaint route. The authority's jurisdiction and available remedies vary.

File a complaint with Indiana Attorney General. Consumer Protection

FAQ: Indiana data removal

How is INCDPA different from Virginia's VCDPA?+

Both laws provide access, correction, deletion, portability, and opt-out rights, but their definitions, exemptions, notice requirements, and enforcement mechanics differ. Compare the current Indiana and Virginia texts instead of treating them as interchangeable.

Related resources

Other state guides