§ 24-15-5-1 — Duty of processor to assist controller in meeting obligations regarding personal data

Effective 1-1-2026.
Sec. 1. A processor shall adhere to the instructions of
a controller and shall assist the controller in meeting its obligations
under this chapter. Such assistance shall include the following:
(1) Assisting the controller in meeting the controller's obligation
to respond to consumer requests under IC 24-15-3 by appropriate
technical and organizational measures, insofar as this is
reasonably practicable, and taking into account the nature of
processing and the information available to the processor.
(2) Taking into account the nature of processing and the
information available to the processor, assisting the controller in
meeting the controller's obligations in relation to:
(A) the security of processing the personal data; and
(B) the notification of a breach of security of the system of the
processor under IC 24-4.9;
in order to meet the controller's obligations.
(3) Providing necessary information to enable the controller to
conduct and document data protection impact assessments under
IC 24-15-6.

Legislative History

As added by P.L.94-2023, SEC.1.