{"data":{"id":"us-in/ic-24-15-4-5","jurisdiction":"us-in","citation":"IC 24-15-4-5","heading":"Exercise of rights by consumers; controller's duty to provide secure and reliable means for submitting requests","body":"Sec. 5. A controller shall establish, and shall describe in a privacy notice provided under section 3 of this chapter, one (1) or more secure and reliable means for consumers to submit a request to exercise their rights under IC 24-15-3. Such means must take into account:\n(1) the ways in which consumers normally interact with the controller;\n(2) the need for the secure and reliable communication of such requests; and\n(3) the ability of the controller to authenticate the identity of the consumer making the request.\nA controller may not require a consumer to create a new account in order to exercise the consumer's rights under IC 24-15-3 but may require a consumer to use an existing account.","path":["TITLE 24. TRADE REGULATION","ARTICLE 15. CONSUMER DATA PROTECTION","Chapter 4. Data Controller Responsibilities; Transparency"],"source_url":"https://iga.in.gov/ic/2026/Title_24.html#24-15-4-5","current_through":"2026","vintage":"2026","retrieved_at":"2026-09-04T18:50:41Z","sha256":"68159db7929e02271e22cb0bd246c871933aed26e348d8d67a598c1446c10e44","source_id":"us-in","stale":false,"prev":"us-in/ic-24-15-4-4","next":"us-in/ic-24-15-4-6"},"notice":"GroundRules: Original legal text. Not legal advice."}