Indiana Data Removal Guide (2026)
Indiana's Consumer Data Protection Act took effect January 2026. It gives covered consumers access, correction, deletion, portability, and opt-out rights, subject to the statute's scope, exemptions, and request rules.
Research status: this is a dated state-law snapshot; verify the current official sources before relying on a right, deadline, penalty, or complaint route.
This page is educational orientation, not legal advice. Scope, exemptions, deadlines, penalties, regulator powers and broker routes can change. Verify the current statute and state regulator guidance before relying on a right or deadline.
At a glance
- Comprehensive state privacy law
- Recorded: INCDPA
- Broker response deadline
- 45 days in this research snapshot for qualifying requests; extensions and exemptions may apply
- Enforcement
- Indiana Attorney General. Consumer Protection
Indiana Consumer Data Protection Act (INCDPA)
INCDPA applies to a person doing business in Indiana or targeting Indiana residents that meets either the 100,000-consumer branch or the 25,000-consumer-plus-more-than-50%-sale-revenue branch, subject to exemptions. Rights include access, correction, deletion, portability, and opt-outs from sale, targeted advertising, and certain profiling. Controllers generally respond within 45 days, with a possible 45-day extension, and decide appeals within 60 days. The Attorney General has exclusive enforcement authority, with a 30-day written notice-and-cure process and penalties up to $7,500 per violation; there is no private right of action.
Read the full INCDPAexplainer →Scope, thresholds, exceptions, cure rules, and enforcement details where documented.
What rights do Indiana residents have?
- →Access, correct, delete, port, opt out of sale, targeted advertising, and certain profiling
- →45-day response, possible 45-day extension, and 60-day appeal decision
- →AG enforcement, no private right of action
Where does your data leak from in Indiana?
The FTC explains that people-search sites may combine public records, public social profiles, and information from other brokers. The examples below are a research snapshot, not an exhaustive or person-specific source map for Indiana:
- Indiana MyCase public record search
- Marion, Lake, Allen County property records
- Indiana BMV records
Generate requests in under 60 seconds
Explore 1,034 US/global data brokers
What if a broker ignores your request?
If a qualifying request does not receive a response within the applicable window, review the current extension and exemption rules, then consider the Indiana Attorney General. Consumer Protection complaint route. The authority's jurisdiction and available remedies vary.
File a complaint with Indiana Attorney General. Consumer Protection ↗FAQ: Indiana data removal
How is INCDPA different from Virginia's VCDPA?+
Both laws provide access, correction, deletion, portability, and opt-out rights, but their definitions, exemptions, notice requirements, and enforcement mechanics differ. Compare the current Indiana and Virginia texts instead of treating them as interchangeable.
How long does INCDPA give a controller to answer a request or appeal?+
A controller generally has 45 days to respond and may extend the response by another 45 days when reasonably necessary after giving notice. A controller must decide an appeal within 60 days, subject to the statute and the applicable request process.