As of the start of 2026, Indiana is among the 20 states with active data privacy legislation aimed at protecting consumers’ personal data and keeping consumers informed about how their data is being used. The Indiana Consumer Data Protection Act (INCDPA) was enacted on May 1, 2023, and became effective on January 1, 2026.

Here’s what business owners need to know about consumer rights created under the INCDPA: