Indiana Code Title 28. Financial Institutions § 28-1-2-30.5

Sec. 30.5. (a) This section applies to the following:

(b) As used in this section, “customer”, with respect to a person described in subsection (a), means an individual consumer, or the individual's legal representative, who obtains or has obtained from the person a financial:

that is to be used primarily for personal, family, or household purposes.  The term does not include an affiliate of the person.

(c) As used in this section, “personal information” includes any of the following:

(d) As used in this section, personal information is “encrypted” if the personal information:

(e) As used in this section, personal information is “redacted” if the personal information has been altered or truncated so that not more than the last four (4) digits of:

are accessible as part of the personal information.

(f) As used in this section, “personal records” means any records that:

(g) A person to whom this section applies shall keep and handle personal records in a manner that:

(h) If a breach of the security of any personal records occurs, the person maintaining the records is subject to the disclosure requirements under IC 24-4.9-3, unless the person is exempt from the disclosure requirements under IC 24-4.9-3-4.

(i) A person to whom this section applies may not dispose of personal records without first:

(j) If a person to whom this section applies ceases doing business, the person shall, as part of the winding up of the business, safeguard any personal records maintained by the person in accordance with this section until such time as the person is entitled or required to destroy the records under:

(k) A person to whom this section applies shall provide at the person's cost any records that the director considers relevant or material to an examination, investigation, or other matter under consideration by the department.