Laws and data licensing
Indiana Consumer Data Protection Act and AI data licensing
Short answer
If your records include personal data of Indiana residents, licensing them could count as a "sale" unless the data is properly de-identified first. That is one reason personal details are removed before anything is shared.
In short
- Law
- Indiana Consumer Data Protection Act
- Jurisdiction
- Indiana
- Applies to
- Indiana's comprehensive consumer privacy law, covering personal data of Indiana residents held by businesses that meet its thresholds.
- Last reviewed
- 2026-10-09
- 01Your work records
- 02Personal details removed
- 03You approve the release
- 04Licensed to AI developers
What it covers#
Indiana. Indiana's comprehensive consumer privacy law, covering personal data of Indiana residents held by businesses that meet its thresholds.
Key points for licensing#
- Usually applies only above set thresholds of consumers or revenue from selling data
- Gives consumers rights to access, delete and opt out of sale or targeted advertising
- Properly de-identified data, with public commitments not to re-identify it, is generally treated differently from personal data
- Sensitive data such as health, precise location or children's data typically needs consent
How SourceX handles it#
- Personal details are removed before anything is shared
- Rules that apply are assessed deal by deal with your counsel
- Records that can't be cleared are excluded
- Your company approves every release
Frequently asked questions
What does the Indiana Consumer Data Protection Act cover?
Indiana. Indiana's comprehensive consumer privacy law, covering personal data of Indiana residents held by businesses that meet its thresholds.
Does licensing company records to an AI developer fall under the Indiana Consumer Data Protection Act?
If your records include personal data of Indiana residents, licensing them could count as a "sale" unless the data is properly de-identified first. That is one reason personal details are removed before anything is shared.
What are the key points of the Indiana Consumer Data Protection Act for data licensing?
Usually applies only above set thresholds of consumers or revenue from selling data. Gives consumers rights to access, delete and opt out of sale or targeted advertising. Properly de-identified data, with public commitments not to re-identify it, is generally treated differently from personal data. Sensitive data such as health, precise location or children's data typically needs consent.
General information, not legal advice. Laws change and their application depends on your facts. SourceX assesses which rules apply deal by deal with your counsel. Last reviewed 2026-10-09.