Fast.  Secure.  Free.  Forever.
Indiana State Privacy Law
Effective January 1, 2026

Indiana Consumer Data Protection Act
(ICDPA)

The Indiana Consumer Data Protection Act (ICDPA) gives Indiana residents the right to access, delete, and opt out of the sale of their personal data, effective January 2026.

ICDPA
Law Abbreviation
$7,500
Max Fine Per Violation
45
Days to Respond
100,000
Coverage Threshold
Your Rights Under ICDPA

What the law gives you

The Indiana Consumer Data Protection Act (ICDPA) grants residents the following legally enforceable rights over their personal data:

Access
Confirm processing and obtain a copy of your personal data.
Delete
Request deletion of personal data you provided or that was collected about you.
Correct
Require correction of inaccurate personal data.
Portability
Receive your data in a portable format.
Opt Out
Opt out of targeted advertising, data sales, and profiling with significant effects.
How to Exercise Your Rights

Step by step

01
Submit a request via the company’s designated privacy contact.
02
Company must respond within 45 days (extendable to 90 days with notice).
03
Appeal a denial within 45 days of receiving the company’s response.
04
File a complaint with the Indiana AG if your appeal is denied.
ClickOff makes this automatic. Rather than submitting individual requests to hundreds of data brokers, ClickOff acts as your authorized agent under the ICDPA and all applicable state laws — submitting deletion requests to 200+ brokers simultaneously. Free forever.
Delete your data under ICDPA.
Free forever. Legal receipt generated instantly. 45-day compliance clock starts now.
Delete My Data From Every Broker →
Related Laws

Other privacy laws that protect you

CCPA — California → SB 362 — Delete Act → ADPA — Federal → All Your Rights →
ICDPA questions
Indiana privacy law,
explained.
When did Indiana’s law take effect?
Indiana’s Consumer Data Protection Act became effective January 1, 2026 — making it one of the newer state privacy laws. It closely mirrors Virginia’s VCDPA in structure.
Is there a cure period?
Yes. Companies receive a 30-day cure period after receiving notice of a violation. The cure period sunsets on January 1, 2028.
How does ClickOff help me use my ICDPA rights?
ClickOff acts as your authorized agent under the ICDPA and all applicable state laws. Instead of sending individual deletion requests to hundreds of data brokers one by one, ClickOff submits on your behalf to 200+ brokers simultaneously — with a legal receipt generated instantly. Free forever.