Indiana joins California, Colorado, Connecticut, Iowa, Virginia, and Utah as the 7th state to pass a comprehensive privacy law. Tennessee and Montana are close to passing similar laws. But, closer to home, the Indiana Consumer Data Protection Act imposes new data collection, sharing, and security requirements on certain businesses conducting business in Indiana or targeting Indiana residents. Ohio businesses should evaluate the potential impacts of our neighbor state’s new law now, as it becomes effective on January 1, 2026.