Indiana Privacy Disclosure

1. Overview of the law

The Indiana Consumer Data Protection Act took effect on January 1, 2026. It applies to businesses that process personal data of at least 100,000 Indiana residents, or 25,000 residents when more than half of revenue comes from selling personal data. The law is enforced exclusively by the Indiana Attorney General. SIE meets the 100,000 resident threshold and applies the INCDPA in full.

2. Your rights

• Right of access. Confirm processing and get a copy of your personal data.
• Right to correct. Fix inaccurate personal data.
• Right to delete. Have personal data we hold about you erased.
• Right to portability. Receive your data in a usable format.
• Right to opt out. Stop targeted advertising, sale of personal data, and certain profiling.
• Right to appeal. Appeal a denial within forty-five days.

3. How SIE complies

We obtain opt-in consent before processing sensitive data, including data revealing race, religion, mental or physical health, sexual orientation, citizenship, genetic or biometric identifiers, precise geolocation, and any data of a known child under thirteen. Indiana gives controllers a thirty-day cure period after notice from the Attorney General. SIE keeps an audit trail and a documented response process so we can cure any deficiency promptly.

4. Authorized agents

The INCDPA does not require us to honor authorized agents. SIE accepts authorized-agent submissions as a courtesy when they include a signed permission letter from you. We may verify the request directly with you before acting.

5. How to submit a request

Or email [email protected] with the subject line "Indiana ICDPA Request".We respond within forty-five days.

6. Effective date and scope

The INCDPA took effect on January 1, 2026. The law covers Indiana residents acting in a personal or household context. Personal data processed in a B2B or employment context is out of scope.