Indiana § 24-15-8-7 - Processing of personal data for authorized purposes; collection, use, or retention of personal data; burden of proof for exemption
Full text of Indiana Indiana Code § 24-15-8-7 — Processing of personal data for authorized purposes; collection, use, or retention of personal data; burden of proof for exemption, with citation guidance and answers to common questions.
§ 24-15-8-7. Processing of personal data for authorized purposes; collection, use, or retention of personal data; burden of proof for exemption
Sec. 7. (a) Personal data processed by a controller for a purpose authorized under this chapter may not be processed for any other purpose unless otherwise allowed under this article. Personal data processed by a controller under this chapter may be processed to the extent that such processing is:
(1) reasonably necessary and proportionate to a purpose authorized under this chapter; and
(2) adequate, relevant, and limited to what is necessary in relation to the specific purpose.
(b) Personal data collected, used, or retained under section 2 of this chapter:
(1) shall, as applicable, take into account the nature and purpose of the collection, use, or retention; and
(2) must be subject to reasonable administrative, technical, and physical measures to:
(A) protect the confidentiality, integrity, and accessibility of the personal data; and
(B) reduce reasonably foreseeable risks of harm to consumers relating to such collection, use, or retention of the personal data.
(c) If a controller processes personal data pursuant to an exemption under this chapter, the controller bears the burden of demonstrating that such processing:
(1) qualifies for the exemption; and
(2) complies with the requirements set forth in this section.
As added by P.L.94-2023, SEC.1.
IC 24-15-9Chapter 9. Investigative Authority
24-15-9-1Violations; civil investigative demand by attorney general
Source: official Indiana text · Last verified 2026-08-27
Frequently Asked Questions About Indiana § 24-15-8-7
What does Indiana Code § 24-15-8-7 cover?
Section 24-15-8-7 ("Processing of personal data for authorized purposes; collection, use, or retention of personal data; burden of proof for exemption") is part of the Indiana Code, the codified statutory law of Indiana. It sets out the legal rule or procedure described in the text above. Statutes are amended regularly, so always verify against the official source.
How do I cite Indiana § 24-15-8-7?
A common citation format is "Indiana Code § 24-15-8-7" (Indiana). Legal writing may require the code abbreviation, section number, and year or edition. Match the style required by your court, professor, or publisher.
Is this the official text of Indiana law?
No. This page is for research and education and may not include the most recent amendments. For official current law, check the Indiana official source linked on this page or consult a licensed Indiana attorney.
How does Indiana § 24-15-8-7 apply to my situation?
Statutes are interpreted in context, and application depends on your specific facts. Only a licensed attorney in Indiana can advise on how this section applies to you. Contact your state or local bar association for a referral.
Sources & Verification
Not legal advice. Verify against the official source and consult a licensed attorney in Indiana.