Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I use third-party cloud storage services that collect personal information in Indiana? What are the requirements?

Third-Party Cloud Storage Services and Personal Information in Indiana

Indiana state law requires that any state agency maintaining a personal information system must collect, maintain, and use only that personal information as is relevant and necessary to accomplish a statutory purpose of the agency [1.1]([1.1]). However, it is unclear whether this law applies to third-party cloud storage services that collect personal information.

In addition, Indiana has specific regulations regarding the disclosure and use of nonpublic personal financial information [2.1]([2.3]). These regulations require that a licensee may not disclose any nonpublic personal financial information about a consumer to a nonaffiliated third party unless the licensee has provided the consumer with an initial notice, an opt-out notice, and a reasonable opportunity to opt-out of the disclosure [2.3]([2.3]).

Therefore, if the third-party cloud storage service collects nonpublic personal financial information, the licensee must comply with the regulations outlined in [2.1]([2.1]) and [2.3]([2.3]). If the third-party cloud storage service collects personal information that is not nonpublic personal financial information, it is unclear whether Indiana state law applies.

It is recommended that you consult with a legal professional for further guidance on this matter.

Source(s):
Jurisdiction

Indiana