Sec. 1. As used in this chapter:

     (1) “Personal information system” means any recordkeeping process, whether automated or manual, containing personal information and the name, personal number, or other identifying particulars of a data subject.

     (2) “Personal information” means any information that describes, locates, or indexes anything about an individual or that affords a basis for inferring personal characteristics about an individual including, but not limited to, the individual’s education, financial transactions, medical history, criminal or employment records, finger and voice prints, photographs, or the individual’s presence, registration, or membership in an organization or activity or admission to an institution.

     (3) “Data subject” means an individual about whom personal information is indexed or may be located under the individual’s name, personal number, or other identifiable particulars, in a personal information system.

     (4) “State agency” means every agency, board, commission, department, bureau, or other entity of the administrative branch of Indiana state government, except those which are the responsibility of the state comptroller, treasurer of state, secretary of state, attorney general, and excepting the department of state police and state educational institutions.

     (5) “Confidential” means information which has been so designated by statute or by promulgated rule or regulation based on statutory authority.

As added by Acts 1977, P.L.21, SEC.1. Amended by Acts 1978, P.L.10, SEC.1; P.L.19-1983, SEC.1; P.L.2-2007, SEC.17; P.L.215-2016, SEC.2; P.L.219-2017, SEC.7; P.L.8-2019, SEC.6; P.L.43-2021, SEC.5; P.L.9-2024, SEC.27.