Indiana Consumer Data Protection Act - Profiling Provisions

INFor companies using AILowseverityIn effect

In effect since

Overview

Grants Indiana consumers the right to opt out of profiling for decisions with legal or significant effects.

This is a privacy law with automated decision-making provisions.

Who this applies to

This regulation applies to companies that use or deploy AI tools and systems built by other vendors. If your company uses AI-powered products in the areas listed below, this regulation may apply to you.

AI categories covered

  • Consumer-facing AI
  • Automated decision-making

Specific AI use cases:

  • Customer profiling and segmentation

What this requires you to do

  • Consumer opt-out required

    Provide an opt-out mechanism. Consumers must be able to opt out of automated decision-making.

  • Profiling disclosure required

    Disclose profiling activities. Inform consumers when you use their data for profiling purposes.

Enforcement and penalties

Up to $7,500 per violation. Enforced by Indiana AG.

Source

Read the full text

https://iga.in.gov/legislative/2023/bills/senate/5

Always verify current language and amendments at the official source.

Want to know what else applies to your company?

Run a free XIRA scan to see all regulations that match your states and AI tools.