Lexology January 21, 2026
What Businesses Need to Know
Contrary to the expectations of many in the privacy field, no new state-level data privacy laws were passed in 2025. As we enter 2026, however, several laws that were passed in 2024, along with several other updates and changes to existing privacy laws and laws governing artificial intelligence (AI) and data breach notification, are taking effect. Here are the new and/or improved laws that businesses need to be aware of in the new year:
I. New Comprehensive State Consumer Privacy Laws Effective January 1, 2026
1) Indiana: Indiana Consumer Data Protection Act (ICDPA)
Effective date: January 1, 2026. (Government of Indiana)
Applies to: Businesses that (1) conduct business in Indiana (or target Indiana residents) and,...







