privacy

Indiana's Consumer Data Protection Act: What Lafayette-Area Businesses Need to Know

Indiana's ICDPA took effect January 1, 2026. Who it actually covers, what it requires, and what to do if you are under the threshold but customers still ask.

SC2 published on
7 min, 1326 words

Indiana’s Consumer Data Protection Act (ICDPA, IC 24-15) took effect on January 1, 2026. It gives Indiana residents a set of privacy rights and puts matching obligations on the businesses that handle their data.

Here is the part most coverage buries: the majority of Lafayette-area small businesses are not covered by it. The thresholds are high. That does not mean you can ignore it — your customers, your insurer, and your contracts increasingly will not care where the statutory line sits — but it does mean you should know which side of the line you are on before you spend money.

Read More