On January 1, 2026, broad new privacy laws will take effect in Kentucky, Indiana, and Rhode Island, granting consumers in those states greater control over their personal data. With these additions, 19 states now have comprehensive privacy laws in place, which is a significant shift in the data privacy landscape since California led the way in 2018 with the
Indiana
CDPA Countdown: Hoosiers Get a Privacy Bill of Rights
Indiana’s new Consumer Data Protection Act (CDPA) takes effect on January 1, 2026. It follows other state consumer privacy laws by providing consumers with rights related to the collection and processing of their information. On November 25, 2025, Indiana’s Attorney General issued a Consumer Data Protection Bill of Rights as “a tool to educate Hoosiers…
Four More States Pass Consumer Privacy Statutes
Tennessee, Montana, Iowa, and Indiana have each recently passed a consumer privacy statute in recent weeks. These laws follow the same trend started by California’s Consumer Privacy Act by granting consumers the right to know whether a company is processing their data; the right to access that data, obtain a copy, and to have it…
Indiana Amends Breach Notification Law to Require Notification Within 45 Days
Indiana has amended its breach notification law to require entities to notify individuals “without unreasonable delay, but not more than forty-five (45) days after the discovery of the breach.” It clarifies that a delay is “reasonable” if it is: “(1) necessary to restore the integrity of the computer system; (2) necessary to discover the scope…
At Least 22 States Have Consumer Privacy Legislation Pending – Will 2022 Be the Year for More State Privacy Laws?
California is the gold standard for state privacy laws, having recently enacted the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). Virginia and Colorado also have enacted comprehensive privacy laws, which will take effect in 2023. Recently, the International Association of Privacy Professionals (IAPP) released its state privacy legislation tracker.…
Public Safety Sector and Drone Use: The Fort Wayne, Indiana Model
The public safety sector continues to grow and the need for police use of drones to protect and serve their communities is growing along with it. In Fort Wayne, Indiana, the Police Department Air Support Unit (ASU), first formed in 2017, is responsible for overseeing emergency service team (EST) operations. The team consists of two…
CafePress to Pay $2 Million in Multi-State Data Breach Settlement
On December 18, seven states have entered into a settlement agreement with e-retailer Cafe-Press for $2 million stemming from a 2019 data breach that exposed information of approximately 22 million consumers. The breach affected consumers’ personal information, including usernames and passwords, Social Security numbers, and/or Taxpayer Identification numbers.
Of the $2 million, $750,000 will be…
On the Border Restaurant Suffers Data Breach
Last week, the Tex-Mex restaurant chain On the Border suffered a data breach that impacted its payment acceptance systems in 27 states. The restaurant says that some credit card information of customers who visited the chain between April and August 2019 may have been compromised. In a press release, On the Border representatives said, “Our…
FTC and Ten States Settle with Caribbean Cruise Lines for Robocall Accusations
This week, the Federal Trade Commission (FTC) and ten states settled charges against the Florida-based cruise line, Caribbean Cruise Line, Inc. (CCL), for an illegal telemarking campaign that inundated consumers with billions of unwanted robocalls. In settling these charges, CCL’s owner, Fred Accuardi, and all of his companies are barred from robocalling and illegal telemarketing.…
Cancer Services Provider Confronts Ransomware Bully
My newest hero in the fight against ransomware is Little Red Door Cancer Services of East Central Indiana (Little Red Door). I am sending a donation to it to celebrate its courage in the last few weeks.
Little Red Door is a small not-for-profit agency in Indiana devoted to help cancer victims during their treatment, recovery and end of life. Its mission is to help people suffering with cancer.
On January 11, 2017, TheDarkOverlord attacked Little Red Door with ransomware and demanded a payment of 50 Bitcoin (approximately $43,000) for return of the data. If the ransom wasn’t paid, the threat was that confidential information would be disclosed to the public.
Continue Reading Cancer Services Provider Confronts Ransomware Bully