Indiana data privacy and data broker removal

Indiana has a comprehensive privacy law that gives you the right to access, delete, and control your personal data. Here is how those rights work in practice and how to remove yourself from data brokers.

At a glance
Comprehensive privacy law? Yes — Indiana Consumer Data Protection Act (ICDPA)
In effect since January 1, 2026
Your core rights Access, correct, delete, data portability, and 4 more
Honors Global Privacy Control? No
Data-broker registry? No
Can you sue? (private right of action) No
Enforced by Indiana attorney general (from July 1, 2026)
Last verified June 2026 Reviewed quarterly

Your rights in Indiana

Indiana residents are protected by the Indiana Consumer Data Protection Act (ICDPA).

Sensitive data gets extra protection. Companies need your explicit consent before collecting or using your most sensitive personal information, including biometric data, precise location, health information, race or ethnicity, and sexual orientation. That is a higher bar than the standard opt-out that covers other data.

Does this cover the company that has my data?

Most companies that collect or sell personal data in Indiana are likely covered. The law applies to businesses that, in a calendar year, control or process the data of at least 100,000 Indiana residents, or at least 25,000 residents while earning more than half their revenue from selling personal data.

What's changing. The ICDPA took effect January 1, 2026. The state's exclusive enforcer, the attorney general, began acting on violations July 1, 2026, and gives a company 30 days to fix a problem before the state can act.

How to remove yourself from data brokers in Indiana

Your state law gives you the right to request deletion, but exercising it takes real effort. Your information is scattered across data brokers, people-search sites, and beyond. Here are the most effective steps, in order.

1. Enable Global Privacy Control

Global Privacy Control is a free browser setting that automatically tells every website you visit not to sell or share your data. It takes about two minutes to enable and then works in the background. Indiana does not require companies to honor it, but many major companies do anyway because California's law obligates them.

2. Submit direct opt-out requests

You can submit requests to each broker directly. Look for the "Do not sell my personal information" link in a company's website footer; most major brokers have one. You can also file an access, deletion, or correction request through a company's privacy policy page.

Under Indiana's law, covered companies must respond within the deadline the law sets. If they don't, you have grounds to file a complaint with the attorney general.

3. Automate ongoing removal

Here is the part nobody tells you: even after you finish every step above, brokers pull your information back in from public records, data-sharing networks, and commercial databases. Within a few months, your profiles reappear. Staying removed is not a one-time task. It is ongoing work that is hard to keep up with by hand.

Delist finds your exposed data, files the removals for you, and re-runs a full scan every month so it stays down. Start with a free scan to see where your information shows up.

Run a free scan

Indiana's data broker law: what it means for you

Indiana does not keep a dedicated data-broker registry. Most national brokers are registered in California and will honor an opt-out from a resident of any state, but without an Indiana law requiring it, you have little recourse if a broker ignores you. Delist handles this across brokers and states in one place.

Other privacy protections in Indiana

Beyond the comprehensive privacy law, Indiana has additional protections that may apply to you:

How to file a privacy complaint in Indiana

File with the Indiana Attorney General, Consumer Protection Division: in.gov/attorneygeneral/consumer-protection-division

The attorney general enforces the law in the aggregate, investigating patterns of violations rather than resolving individual disputes. Filing still matters: it builds the record that drives enforcement.

Frequently asked questions

Does Indiana have a data privacy law?
Yes. Indiana residents are protected by the Indiana Consumer Data Protection Act (ICDPA), which gives you rights to access, delete, and control your personal data.
Can I sue a company for violating my privacy in Indiana?
No. The Indiana attorney general is the only one who can enforce the ICDPA. Consumers cannot sue companies for violations.
How do I opt out of data brokers in Indiana?
Enable Global Privacy Control, submit direct opt-out requests to each broker, and consider a removal service to automate the process. Indiana has no broker registry.
Does Indiana require websites to honor Global Privacy Control?
Not yet mandated statewide, but many companies honor GPC voluntarily. Enable it in your browser settings. It costs nothing and sends your opt-out preference automatically.

Sources

This page is privacy-rights information, not legal advice. Privacy law changes frequently; verify current rules with your state privacy agency or a licensed attorney before acting. Last verified June 22, 2026. We re-check state privacy laws quarterly.

Take back your privacy in Indiana

Delist finds your exposed data, files the removals for you, and re-runs a full scan every month so it stays down.

Run a free scan