Indiana Code Title 4. State Offices and Administration § 4-1-11-6

Sec. 6. (a) This section applies to a state agency that maintains computerized data that includes personal information that the state agency does not own.

(b) If personal information was or is reasonably believed to have been acquired by an unauthorized person, the state agency shall notify the owner or licensee of the information of a breach of the security of the system immediately following discovery.  The agency shall provide the notice to state residents as required under section 5 of this chapter.