Indiana residents gained significant new privacy rights on January 1, 2026, when the Indiana Consumer Data Protection Act took effect. The ICDPA gives you the power to access, delete, and opt out of the sale of your personal data. Here is a complete guide to leveraging your new rights and removing your information from data brokers in Indiana.
Understanding the Indiana Consumer Data Protection Act (ICDPA)
The ICDPA was signed into law in May 2023 and went into effect on January 1, 2026. It applies to businesses that conduct business in Indiana or produce products targeted to Indiana consumers, and that either:
- Control or process the personal data of 100,000 or more Indiana consumers, or
- Control or process the personal data of at least 25,000 Indiana consumers and derive more than 50% of revenue from selling personal data
Most major data brokers and people search sites meet these thresholds, which means they must comply with your requests under this law.
Your Rights Under the ICDPA
As an Indiana resident, you now have these rights over your personal data:
- Right to know: Confirm whether a business is processing your personal data
- Right to access: Obtain a copy of the personal data you previously provided
- Right to correct: Fix inaccuracies in your personal data
- Right to delete: Request deletion of personal data provided by or obtained about you
- Right to data portability: Receive your data in a portable, readily usable format
- Right to opt out: Stop the processing of your personal data for targeted advertising, sale of personal data, and profiling that produces legal or similarly significant effects
Businesses must respond to your requests within 45 days. They can extend this by an additional 45 days if reasonably necessary, but must inform you of the extension.
Indiana's Consumer Data Protection Bill of Rights
The Indiana Attorney General has published a Consumer Data Protection Bill of Rights that summarizes your ICDPA rights in plain language. You can find it on the AG's website at in.gov/attorneygeneral. It is a useful reference when submitting opt-out or deletion requests.
Step 1: Find Your Data Online
Start by searching for yourself to identify which data brokers have your information:
- Search your full name on Google, Bing, and DuckDuckGo — try variations with your city, state, and zip code
- Check major people search sites: TruePeopleSearch, Spokeo, WhitePages, BeenVerified, PeopleFinders, Radaris, Intelius, FastPeopleSearch, and Nuwber
- Search your phone number and email address separately to find additional profiles
- Check property record sites if you own a home in Indiana
Document every site where your information appears. The typical Indiana resident is listed on 30 or more data broker sites.
Step 2: Submit Opt-Out Requests
For each data broker on your list, follow their opt-out process:
- Look for a "Do Not Sell My Personal Information" or "Privacy" link, usually in the site footer
- Fill out the opt-out or data deletion request form
- Provide the information needed to locate your record — typically your name, address, date of birth, and email
- Complete any verification step such as an email confirmation or identity upload
- Save confirmation emails and take screenshots for your records
- Check back in 15 to 30 days to verify your profile has been removed
Step 3: Formally Invoke Your ICDPA Rights
If a data broker ignores your opt-out request or does not provide a clear removal process, you can formally invoke the ICDPA. Send a written request — by email or certified mail — citing the Indiana Consumer Data Protection Act.
Sample ICDPA Deletion Request
"Under the Indiana Consumer Data Protection Act (IC 24-15), I am exercising my right to delete all personal data you hold about me and to opt out of the sale of my personal data, targeted advertising, and profiling. My identifying information: [Full Name, Date of Birth, Current Address, Previous Addresses, Email, Phone Number]. Please confirm completion of this request within 45 days as required by law."
Step 4: Deal With Indiana Public Records
Indiana's public records are a major source of data for brokers. Key sources include:
- Property tax records: County assessor offices publish ownership, address, and property value information online through Indiana's Gateway portal
- Voter registration: Indiana voter files contain your name, address, and date of birth, and are available to political parties and researchers
- Court records: Indiana's Odyssey case management system publishes court records online through mycase.in.gov
- BMV records: Indiana's Bureau of Motor Vehicles data is restricted but may still be accessed by certain entities under the Driver's Privacy Protection Act
You cannot erase yourself from public records, but you can consistently remove the aggregated profiles that data brokers build from these sources.
Step 5: File a Complaint If Necessary
If a business fails to respond to your ICDPA request within 45 days or refuses your request without valid justification, you can file a complaint with the Indiana Attorney General. The AG has exclusive enforcement authority and can impose civil penalties of up to $7,500 per violation.
Expect Re-Listing
Data brokers routinely rebuild your profile after removal. They re-scrape public records, purchase updated data from other aggregators, and recombine fragments of your information into new listings. Plan to check and re-submit opt-outs every 3 to 6 months to maintain your privacy.
The Automated Alternative
Manually opting out of dozens of data brokers is time-consuming and repetitive. PrivacyOn automates the entire process for Indiana residents. We submit removal requests to more than 100 data broker sites on your behalf, monitor for re-listings, and handle re-submissions automatically. PrivacyOn also provides dark web monitoring to alert you if your personal information appears in data breaches or leaked databases.
Family plans cover up to 5 household members — ideal for protecting your entire family under Indiana's new privacy law. Plans start at $8.33 per month.
Indiana Privacy Resources
- Indiana Attorney General Consumer Protection: File complaints at in.gov/attorneygeneral
- Indiana Consumer Data Protection Bill of Rights: Available on the AG's website
- IdentityTheft.gov: Federal resource for identity theft reporting and recovery
- AnnualCreditReport.com: Free credit reports from all three bureaus
Start Protecting Your Data Now
The ICDPA is a significant step forward for Indiana residents. You finally have legal rights to demand that data brokers delete your information and stop selling it. But those rights only matter if you exercise them. Whether you do it manually or let PrivacyOn handle the heavy lifting, the most important step is the first one — finding out what data is already out there and starting the removal process today.