Does Indiana’s new data privacy law apply to small businesses? 

Usually not directly. The Indiana Consumer Data Protection Act, effective January 1, 2026, applies to businesses processing personal data of at least 100,000 Indiana consumers annually. However, Indiana’s separate breach notification law applies to businesses of all sizes, which is one reason many small businesses carry cyber insurance. 

By Heather

Heather focuses on small business insurance at Gild Insurance Agency, writing clear, practical guidance that helps business owners understand coverage, manage risk, and protect their businesses.