IC 24-15-7-2: Pseudonymous data; technical and organizational controls

Sec. 2. The:

(1) rights of a consumer set forth in IC 24-15-3-1(b)(1) through IC 24-15-3-1(b)(4); and

(2) responsibilities of a controller under IC 24-15-4-1(1) through IC 24-15-4-1(5);

do not apply to pseudonymous data in any case in which the controller is able to demonstrate that any information necessary to identify the consumer is kept separately and is subject to effective technical and organizational controls that prevent the controller from accessing such information.