Disclaimer: This page provides general informational summaries only and does not constitute legal advice. AI-generated content may contain errors. Always consult a qualified attorney for guidance specific to your situation.
Read full disclaimer →
AI Summary
SB0005 establishes consumer data protection laws in Indiana, effective January 1, 2026, detailing consumer rights and controller responsibilities.
Business Impact
If you control consumer data in Indiana, you must comply with new data protection laws by January 1, 2026.
What do these statuses mean? ▼
Introduced
— Filed in the legislature; not yet heard in committee
In Committee
— Assigned to and being reviewed by a legislative committee
Passed
— Approved by one or both chambers; awaiting further action
Signed / Enacted
— Signed into law by the governor; may or may not be in effect yet
Dead / Vetoed
— Vetoed, failed to pass, or session expired without action
Unknown
— Status data not yet available or awaiting classification
Affected Industries
Topics How we classify →
What This Means
Indiana's SB0005, effective January 1, 2026, sets forth consumer data protection measures. It defines consumer rights and outlines responsibilities for data controllers, with enforcement by the attorney general.
Key Provisions
- Definitions of terms related to consumer data protection.
- Exemptions for certain data controllers.
- Consumer rights to confirm, correct, delete, and obtain personal data.
- Responsibilities of data controllers, including data protection impact assessments.
- Requirements for processing de-identified or pseudonymous data.
- Authority of the attorney general to investigate and enforce the law.
- Preemption of local laws on personal data processing.
Latest Legislative Action
Public Law 182
Bill Sponsors (showing 5 of 38)
| Name | Role | District |
|---|---|---|
| Aaron Freeman R | Sponsor | SD-032 |
| Andy Zay R | Sponsor | SD-017 |
| Blake Doriot R | Sponsor | SD-012 |
| Brett Clark R | Sponsor | SD-024 |
| Brian Buchanan R | Sponsor | SD-007 |
Roll Call Votes (showing 3 of 7)
H ·
House - Rules Suspended. Conference Committee Report 1 ·
Apr 23, 2025
90 Yea
1 Nay
9 Other
Passed ✓
S ·
Senate - Conference Committee Report 1 ·
Apr 23, 2025
48 Yea
0 Nay
2 Other
Passed ✓
H ·
House - Third reading ·
Apr 8, 2025
92 Yea
1 Nay
7 Other
Passed ✓
Amendments (10)
Senate Appropriations Amendment #5
Pending
2025-01-23
Senate Appropriations Amendment #5
Pending
2025-01-23
House Ways and Means Amendment #10
Pending
2025-03-25
House Ways and Means Amendment #10
Pending
2025-03-26
House Ways and Means Amendment #9
Pending
2025-03-26
House Amendment #1
Pending
2025-03-31
House Amendment #4
Pending
2025-04-03
House Amendment #3
Pending
2025-04-03
House Amendment #2
Pending
2025-04-03
House Amendment #5
Pending
2025-04-07
Compliance Checklist
Ensure consumer data processing practices comply with new rights and responsibilities.
Who: Data controllers operating in Indiana.
Deadline: By January 1, 2026.
Penalty: Potential enforcement actions by the attorney general.
Who: Data controllers operating in Indiana.
Deadline: By January 1, 2026.
Penalty: Potential enforcement actions by the attorney general.
Conduct data protection impact assessments as required.
Who: Data controllers.
Deadline: By January 1, 2026.
Penalty: Potential enforcement actions for non-compliance.
Who: Data controllers.
Deadline: By January 1, 2026.
Penalty: Potential enforcement actions for non-compliance.
Related & Companion Bills
Full Legal Analysis
SB0005 introduces a new article in the Indiana Code focused on consumer data protection, effective January 1, 2026. The bill defines key terms and outlines exemptions for certain data controllers. It grants Indiana consumers rights to confirm data processing, correct inaccuracies, delete personal data, obtain data copies, and opt out of specific data processing activities. Controllers are tasked with responsibilities, including conducting data protection impact assessments and adhering to requirements for processing de-identified or pseudonymous data. The bill limits its scope and preempts local data processing laws. The attorney general is authorized to investigate and enforce violations and may publish resources online. The bill does not specify penalties for non-compliance.
Official Source
Official Bill Text
View SB0005 on official legislature website →
Related Topics
Affected Industries
More Indiana AI Legislation
HB1620
Disclosure of artificial intelligence use in health care.
Medium
HB1201
Various mental health and insurance matters.
High
HB1047
Education benefits for veterans. Excludes from the determination of f…
Medium
HB1421
Ban on employer use of automated decision systems.
High
HB 1421
Ban on employer use of automated decision systems.
Medium
HB1377
Autonomous vehicles.
Medium
View All IN Laws →
More Indiana AI Laws
Browse all published AI bills and regulations for Indiana.