Indiana Consumer Data Protection Act (INPA)
Complete compliance guide for companies with <200 employees. Everything you need to know about INPA requirements, deadlines, and penalties.
45 calendar days
+ 45 days extension
$7,500/violation
Up to $7,500 per violation under the Indiana Deceptive Consumer Sales Act. A 30-day cure period applies until January 1, 2028, after which the Attorney General may proceed directly with enforcement.
100,000 consumers
$3,500 – $13,000
4-10 weeks
Mid-Market Compliance Guide
Indiana's INPA closely follows the Virginia VCDPA model. It applies to entities processing data of 100,000+ consumers (excluding payment transactions) or 25,000+ consumers deriving 50%+ revenue from data sales. The 30-day cure period sunsets on January 1, 2028, giving businesses several years to establish compliance programs before facing immediate enforcement.
Key Requirements
- Provide a clear and accessible privacy notice
- Limit data collection to what is adequate, relevant, and necessary
- Obtain consent before processing sensitive data
- Conduct data protection assessments for high-risk processing
- Implement and maintain reasonable data security practices
- Establish data processing agreements with processors
Consumer Rights
Business Obligations
- 1.Provide privacy notice with required disclosures
- 2.Respond to consumer requests within 45 days
- 3.Provide an appeals process for denied requests
- 4.Execute data processing agreements with processors
- 5.Implement reasonable data security measures
Exemptions
- •HIPAA-covered entities and data
- •GLBA-covered financial institutions
- •Nonprofits
- •Higher education institutions
- •Government entities
Related Privacy Laws
Recommended Compliance Tools
No vendors have been reviewed for INPA coverage yet.
Browse all compliance toolsGet a mid-market compliance checklist for INPA
We'll send you a practical, step-by-step checklist tailored for companies with <200 employees. No spam, unsubscribe anytime.
See how DPAs enforce INPA in practice
Real fines, real violations, real lessons. Browse our enforcement database to understand what gets penalized under INPA.
Disclaimer: This is general information, not legal advice. Consult a qualified attorney for your specific situation. Laws and regulations may change. Last reviewed: 3/3/2026.