Indiana Consumer Data Protection Act INCDPA-ConsumerRights-Access-Correction-Deletion-Portability-OptOut-TargetedAd-Sale-Profiling-Appeal-45Day: Indiana CDPA Consumer Rights - Access + Correction + Deletion + Portability + Opt-Out of Targeted Advertising/Sale/Profiling + 45-Day Response + 45-Day Extension + Authorised Agent + Appeal Process

Indiana CDPA grants Indiana consumers six core rights subject to verifiable consumer request procedures per IC 24-15-3 and IC 24-15-4. (1) Right to Confirm + Access (IC 24-15-3-1): consumer may confirm whether or not a controller is processing the consumer personal data and access such personal data. (2) Right to Correct (IC 24-15-3-2): consumer may correct inaccuracies in the consumer personal data taking into account the nature of the personal data and the purposes of processing. (3) Right to Delete (IC 24-15-3-3): consumer may delete personal data provided by or obtained about the consumer. (4) Right to Portability (IC 24-15-3-4): consumer may obtain a copy of consumer personal data that the consumer previously provided to the controller in a portable and to the extent technically feasible readily usable format that allows the consumer to transmit the data to another controller without hindrance where the processing is carried out by automated means. (5) Right to Opt-Out (IC 24-15-3-5): consumer may opt out of the processing of personal data for purposes of (a) targeted advertising; (b) the sale of personal data (defined narrowly as exchange for monetary consideration); (c) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer (similar to GDPR Art 22 automated decision making). (6) Right to Appeal (IC 24-15-3-7): if controller declines to take action on a consumer rights request the consumer may appeal within reasonable period + controller shall respond within 60 days + provide written explanation + inform consumer of right to file complaint with Indiana Attorney General. Response Timelines: controller shall respond to consumer rights requests within 45 days of receipt + may extend by additional 45 days where reasonably necessary (90 days total maximum) + must inform consumer of extension. Authorised Agent: consumer may designate authorised agent to exercise opt-out rights on their behalf + including via universal opt-out signal (such as the Global Privacy Control GPC) once Attorney General specifies recognised signals (likely 1 January 2026 onwards). Free of Charge: consumer rights exercises shall be free of charge once per consumer per 12 month period; subsequent requests may incur reasonable fee for processing or controller may decline. Identity Verification: controller may require verification of the consumer identity before fulfilling request to prevent fraud + impersonation. Coordinates with GDPR Arts 15-22 + CCPA + VCDPA + CPA + CTDPA + DPDP Sec 11-14 + Federal Trade Commission Act Section 5 + India DPDP Act consumer rights. INCDPA Consumer Rights applies.