United States of America: Introduced Consumer Data Protection Bill (HB 1554) including data protection regulation

On 19 January 2023, the Consumer Data Protection Bill (HB 1554) was introduced in the Indiana House of Representatives. The Bill would establish a new article in the Indiana Code concerning consumer data protection, which would apply to private, for-profit entities controlling or processing the personal data of at least 100'000 consumers, or at least 25'000 consumers in case the entity derives more than 50% of its revenue from the sale of their data. The article would establish several data subject rights, including the rights to confirm whether a controller is processing their personal data, correct inaccuracies, delete data, obtain a copy or representative summary of the data, or opt out of the processing of their data for specific purposes. Further, the Bill includes provisions on the roles and responsibilities of data controllers and processors, including observing principles of reasonable necessity in processing, abiding by laws prohibiting unlawful discrimination, and carrying out data protection assessments. The investigation of potential violations and enforcement of this article would fall under the authority of the Indiana Attorney General. The report would be effective from 1 January 2026. HB 1554 is similar to SB 5, which was introduced on 9 January 2023 in the Indiana State Senate. HB 1554 does, however, contain more detailed provisions regarding children and data brokers.