
What Is the INCDPA? Indiana's Data Privacy Law
The Indiana Consumer Data Protection Act (IC 24-15) takes effect Jan. 1, 2026, the longest runway of any state privacy law. A Virginia-style INCDPA explainer.
Browse our full library of legal guides, state law breakdowns, and practical legal information.
14754 articles
Browse by Category →
The Indiana Consumer Data Protection Act (IC 24-15) takes effect Jan. 1, 2026, the longest runway of any state privacy law. A Virginia-style INCDPA explainer.

Maryland MODPA compliance: strict-necessity data minimization (Com. Law 14-4607), sensitive-data sale ban, UOOM, assessments, and penalties to $10,000.

Maryland's MODPA (Com. Law 14-4605) grants access, deletion, opt-out, and a 45-day response, plus the strictest sensitive-data and minimization protections in the US.

MODPA (Md. Com. Law 14-4601 et seq.) took effect Oct 1, 2025, the strictest US state privacy law: hard data minimization and a ban on selling sensitive data.

A Minnesota MCDPA compliance checklist: thresholds, the required data inventory under 325M.18, sensitive-data opt-in, and profiling-answer duties.

Minnesota MCDPA consumer rights under Minn. Stat. 325M.14: access, delete, opt out, a third-party list, and a unique right to question profiling.

The Minnesota Consumer Data Privacy Act (Minn. Stat. ch. 325M) took effect July 31, 2025, with a unique right to question profiling decisions.

TIPA compliance steps under Tenn. Code Ann. 47-18-3201 et seq.: NIST written privacy program (affirmative defense), $25M threshold, opt-in sensitive data.

Tennessee's TIPA (47-18-3203) gives access, correction, deletion, portability, and opt-out rights. Controllers must respond within 45 days; AG enforces.

The TIPA (Tenn. Code Ann. 47-18-3201 et seq.) took effect July 1, 2025, with a $25M revenue gate and a unique NIST Privacy Framework affirmative defense.

NJDPA compliance steps (N.J.S.A. 56:8-166.4 et seq.): applicability, notice, sensitive-data consent, GPC, assessments; 30-day cure sunsets ~July 2026.

NJDPA rights (N.J.S.A. 56:8-166.4 et seq.): access, correct, delete, port, and opt out, with a 45-day response, GPC opt-out, and appeals to Consumer Affairs.