Effective 1-1-2026. Sec. 3. Determining whether a person is acting as a controller or a processor with respect to a specific processing of data is a fact based determination that depends upon the context in which personal data is processed. A processor that continues to adhere to a controller's instructions with respect to a specific processing of personal data remains a processor. IC 24-15-6 Chapter 6. Data Protection Impact Assessments 24-15-6-1 Applicability of data protection impact assessment requirements; controller's duty to conduct assessment; activities subject to assessment; weighing of benefits and risks; assessments conducted for compliance with other laws 24-15-6-2 Attorney general's request for data protection impact assessment; controller's duty to provide; confidentiality Effective 1-1-2026.
‹ Prev All Indiana sections Next ›
Lexace provides legal information, not legal advice, and no attorney–client relationship is created. Statute text is provided for general information and may not reflect the most recent amendments; verify against the official state code.