Indiana § 24-15-4-5 Exercise of rights by consumers; controller's duty to provide secure and
reliable means for submitting requests

Indiana Statutes

§ 24-15-4-5 — Exercise of rights by consumers; controller's duty to provide secure and reliable means for submitting requests

Indiana § 24-15-4-5

Art. 15CONSUMER DATA PROTECTION

Ch. 4Data Controller Responsibilities; Transparency

This text of Indiana § 24-15-4-5 (Exercise of rights by consumers; controller's duty to provide secure and reliable means for submitting requests) is published on Counsel Stack Legal Research, covering Indiana primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook

Ind. Code § 24-15-4-5 (2026).

Text

Effective 1-1-2026. Sec. 5. A controller shall establish, and shall describe in a privacy notice provided under section 3 of this chapter, one (1) or more secure and reliable means for consumers to submit a request to exercise their rights under IC 24-15-3. Such means must take into account:

(1)the ways in which consumers normally interact with the controller;

(2)the need for the secure and reliable communication of such requests; and

(3)the ability of the controller to authenticate the identity of the consumer making the request. A controller may not require a consumer to create a new account in order to exercise the consumer's rights under IC 24-15-3 but may require a consumer to use an existing account.

Free access — add to your briefcase to read the full text and ask questions with AI

Effective 1-1-2026.
Sec. 5. A controller shall establish, and shall describe
in a privacy notice provided under section 3 of this chapter, one (1) or
more secure and reliable means for consumers to submit a request to
exercise their rights under IC 24-15-3. Such means must take into
account:
(1) the ways in which consumers normally interact with the
controller;
(2) the need for the secure and reliable communication of such
requests; and
(3) the ability of the controller to authenticate the identity of the
consumer making the request.
A controller may not require a consumer to create a new account in
order to exercise the consumer's rights under IC 24-15-3 but may
require a consumer to use an existing account.