The Digital Age brought more data collection than ever before. Despite this increase, Congress has yet to pass any regulation governing collection. As a result, many state legislatures are enacting legislation to protect citizens’ data privacy. Though Indiana has not passed its own comprehensive privacy legislation, other states’ data privacy laws have extensive implications for Indiana business owners.
Business owners should be aware of laws as they develop to ensure they avoid fines or lawsuits. California holds businesses to the strictest state standard in protecting their citizens’ data privacy with the introduction of the California Consumer Protection Act (CCPA) in 2018, and the California Privacy Rights Act (CPRA), which will take effect Jan. 1, 2023.
Businesses without a California presence may believe a California law does not affect their operations, but the California laws regulate all data-collecting entities that serve or employ residents, even if the business exists outside the state. If your business serves even one California resident, it is subject to the requirements set in the forthcoming CPRA.