Effective 1-1-2026.
Sec. 3. A controller shall provide consumers with a reasonably accessible, clear, and meaningful privacy notice that includes:
(1) the categories of personal data processed by the controller;
(2) the purpose for processing personal data;
(3) how consumers may exercise their consumer rights under IC 24-15-3, including how a consumer may appeal a controller's decision with regard to the consumer's request;
(4) the categories of personal data that the controller shares with third parties, if any; and
(5) the categories of third parties, if any, with whom the controller shares personal data.