{"data":{"id":"us-in/ic-24-15-6-2","jurisdiction":"us-in","citation":"IC 24-15-6-2","heading":"Attorney general's request for data protection impact assessment; controller's duty to provide; confidentiality","body":"Sec. 2. (a) The attorney general may request, pursuant to a civil investigative demand, that a controller disclose any data protection impact assessment that is relevant to an investigation conducted by the attorney general. Upon receipt of such a request, the controller shall make the data protection impact assessment available to the attorney general. Subject to subsection (b), the attorney general may evaluate the data protection impact assessment for a controller's compliance with the responsibilities set forth in IC 24-15-4.\n(b) Data protection impact assessments are confidential and exempt from public inspection and copying under IC 5-14-3-4. The disclosure of a data protection impact assessment pursuant to a request from the attorney general does not constitute a waiver of attorney-client privilege or work product protection with respect to the assessment and any information contained in the assessment.","path":["TITLE 24. TRADE REGULATION","ARTICLE 15. CONSUMER DATA PROTECTION","Chapter 6. Data Protection Impact Assessments"],"source_url":"https://iga.in.gov/ic/2026/Title_24.html#24-15-6-2","current_through":"2026","vintage":"2026","retrieved_at":"2026-09-04T18:50:41Z","sha256":"bf91e2b4df6b76ede09103cde1a9107ead80863393945b9e0ca02d1929f8f759","source_id":"us-in","stale":false,"prev":"us-in/ic-24-15-6-1","next":"us-in/ic-24-15-7-1"},"notice":"GroundRules: Original legal text. Not legal advice."}