Indiana and Kentucky’s comprehensive data privacy laws take effect January 1, 2026, granting residents rights to access, correct, delete, or port their personal data and opt out of targeted advertising, sales, or profiling. Businesses meeting certain thresholds must implement security measures, obtain consent for sensitive data, provide clear privacy notices, and ensure contracts with processors comply with the laws. Enforcement by state Attorneys General allows civil penalties up to $7,500 per violation, with a 30-day notice and cure period.

Read More Here.