Indiana Consumer Data Protection Act 24-15-4-5: IC 24-15-4-5 Secure and reliable request methods without a new account

What does 24-15-4-5 require?

A controller must establish, and describe in its privacy notice, one or more secure and reliable means to submit rights requests, reflecting how consumers normally interact with it, secure communication and its ability to authenticate; it may require an existing account but not the creation of a new one.