State Children's Privacy Law Tracker / Indiana
Indiana Children's Privacy Laws (2026)
2 laws & bills tracked · overall: In force · current as of July 18, 2026
Indiana has 2 tracked children's privacy laws and bills, each listed below with its status, the ages it covers, litigation posture, and a link to the official primary source. For the interactive view, open Indiana in the tracker map.
House Enrolled Act 1408 (2026): Restricting Minor Access to Social Media · HB 1408 / HEA 1408 (2026); Public Law 100
Enacted, not yet effective: Signed into law; its effective date is still in the future. · Social media · effective 2027-01-01 · binds operators, platforms
Ages: under 16
Requires: Covered large social media platforms (>=$1B global revenue, algorithmic feeds/infinite-scroll/autoplay, significant teen usage) must use commercially reasonable means to determine whether an account requester is an Indiana resident under 16 and obtain verifiable parental consent before account creation. Under-16 accounts get locked safety settings (restricted DMs, no search visibility, no algorithmic recommendations, no behavior-based ads, addictive features disabled); platforms must provide a parallel parent/monitoring account and re-verify age after usage thresholds until an account is held continuously for 10 years. Enforced by the AG as a deceptive act under the Deceptive Consumer Sales Act. Note: HEA 1408 is an education omnibus ('Education matters') whose education provisions took effect 2026-07-01, so July-1 new-law roundups cite HEA 1408; the social-media article tracked here takes effect 2027-01-01.
Litigation: No suit filed / no injunction; First Amendment challenge widely anticipated once effective, given courts blocking comparable AR, OH, CA, FL, GA social media laws.
Primary sourceEntry last reviewed
Indiana Consumer Data Protection Act: minors' provisions · SB 5 (2023)
In force: Effective and enforceable today. · Privacy law (minors) · effective 2026-01-01 · binds operators
Ages: Known children under 13
Requires: The personal data of a consumer the controller actually knows to be a child (under 13) is classified as sensitive data, so the controller must obtain opt-in consent before processing it. Such known-child data must be processed in accordance with the federal Children's Online Privacy Protection Act (COPPA); COPPA-compliant parental consent satisfies the statute's consent requirement. The Act sets no separate heightened opt-in band for teens aged 13-17 (it follows the Virginia VCDPA model).
Primary sourceEntry last reviewed
Also on the books (out of scope): SB 17 (2024) / Public Law 98-2024, Ind. Code 24-4-23: Age Verification for Material Harmful to Minors; adult-site age-verification law, effective 2024-07-01; in force after FSC v. Paxton (2025).; HB 1321 (2025): Minor access to social media / age verification. Out-of-scope mandates (like adult-content age-gates) are tracked separately and don't set this state's status.
Regardless of state law, COPPA governs personal information collected from children under 13: notice, verifiable parental consent, data minimization, and (under the 2025 amended Rule) limits on retention and third-party sharing.
SourceHow Indiana compares
- Social media: Indiana is one of 25 states tracking social media legislation: California, Florida, Idaho, Louisiana, Minnesota, Mississippi and 18 more
- Privacy law (minors): Indiana is one of 24 states tracking privacy law (minors) legislation: Arkansas, California, Connecticut, Delaware, Florida, Iowa and 17 more
Not legal advice. I build products for a living; I'm not a lawyer. Compiled from primary sources and reviewed monthly as part of the State Children's Privacy Law Tracker; AI-assisted research, verified against each law's official source, but laws and injunctions change fast, so confirm the latest before relying on it. Related: COPPA's Gray Areas.
Cite this page: Calvo, Isaac A. "Indiana: Children's Privacy Laws." isaaccalvo.com/child-privacy-laws/indiana (data as of 2026-07-18).