Indiana consumer data protection law, controller duties (sensitive data consent) (Ind. Code 24-15-4-1(5) (SEA 5, 2023))
Sensitive data needs the consumer's opt-in consent before processing in Indiana.
Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text
In the source's own words
“(5) A controller shall not process sensitive data concerning a consumer without obtaining the consumer's consent”
Where it was read
Also read from the same source
- Indiana consumer data protection law, definitions (sale of personal data) (Ind. Code 24-15-2-27 (SEA 5, 2023))
- Indiana consumer data protection law, definitions (de-identified data) (Ind. Code 24-15-2-12 (SEA 5, 2023))
- Indiana consumer data protection law, effective date (SEA 5, 2023, section 1) (Ind. SEA 5 (2023), sec. 1)
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide