Law / United States / 
Indiana
Indiana Consumer Data Protection Act, pseudonymous data
Ind. Code §§ 24-15-2-25, 24-15-7-2
In force since .
A de-identification rule binding private bodies.
- Obligation class
- Governance, Security
- Audit expectation
- none
What it requires
- To claim the pseudonymous data exemption from the consumer rights in Ind. Code 24-15-3-1(b)(1) to (4) and the controller responsibilities in 24-15-4-1(1) to (5), be able to demonstrate that any information necessary to identify the consumer is kept separately (Ind. Code 24-15-7-2).
- Subject that separately kept information to effective technical and organizational controls that prevent you from accessing it (Ind. Code 24-15-7-2).
These lines are LexLint's reading of the law's text.
What it makes you log
Logging duty
Sections 24-15-2-25 and 24-15-7-2 define pseudonymous data and set the conditions for the exemption. Neither requires a log or record of processing, sets a retention period or gives a regulator a right to a record, although the controller must be able to demonstrate that the conditions are met.
- Kind
- None
- As of
What this law does
Section 24-15-2-25 defines pseudonymous data as personal data that cannot be attributed to a specific individual because additional information that would allow the data to be attributed to a specific individual is kept separately and is subject to appropriate technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable individual.
Under section 24-15-7-2, the consumer rights in section 24-15-3-1(b)(1) through (4) and the controller responsibilities in section 24-15-4-1(1) through (5) do not apply to pseudonymous data in any case in which the controller is able to demonstrate that any information necessary to identify the consumer is kept separately and is subject to effective technical and organizational controls that prevent the controller from accessing such information.
When LexLint raises it
When your app profile says your app processes personal data or processes de-identified data.
Back to the example · Lint your app
Page updated .