Indiana House Bill 1554 (Prior Session Legislation)

---

Spectrum: Partisan Bill (Republican 1-0)
Status: Introduced on January 19 2023 - 25% progression, died in committee
Action: 2023-01-19 - First reading: referred to Committee on Commerce, Small Business and Economic Development
Pending: House Commerce, Small Business and Economic Development Committee
Text: Latest bill text (Introduced) [PDF]

Consumer data protection. Establishes in the Indiana Code a new article concerning consumer data protection, to take effect January 1, 2024. Sets forth the following within the new article: (1) Definitions of terms that apply throughout the article. (2) Exemptions for certain: (A) persons; and (B) types of information and data; from the bill's requirements concerning the personal data of Indiana consumers (consumers). (3) The rights of a consumer with respect to personal data relating to the consumer. (4) The responsibilities of controllers of consumers' personal data (controllers). (5) The roles of: (A) controllers; and (B) processors of consumers' personal data (processors); with respect to a consumer's personal data. (6) Requirements for data protection assessments by controllers. (7) Requirements for processing de-identified data or pseudonymous data. (8) Limitations as to the scope of the new article. (9) The establishment, maintenance, and publication by the attorney general's consumer protection division of a quarterly listing of electronic mail addresses of consumers who request that their personal data not be sold. (10) Requirements for brokers of consumers' personal information (data brokers) to: (A) provide notification of security breaches; and (B) register annually with the attorney general. (11) The authority of the attorney general to investigate and enforce suspected or actual violations of the new article. (12) The establishment of the consumer privacy account within the state general fund to support the work of the attorney general in enforcing the new article. (13) The authority of the attorney general to: (A) to adopt rules to administer the new article; and (B) issue opinion letters and interpretive guidance to develop an operational framework for persons subject to the new article. (14) The preemption of local rules, regulation, and laws regarding the processing of personal data.

Consumer data protection.

Rep. Chris Jeter [R]

Date	Chamber	Action
2023-01-19	House	First reading: referred to Committee on Commerce, Small Business and Economic Development
2023-01-19	House	Authored by Representative Jeter

Type	Source
Summary	https://iga.in.gov/legislative/2023/bills/house/1554/details
Text	https://iga.in.gov/legislative/2023/bills/house/1554/#1.INTR