Technology (Consumer Data Protection)

Prohibits the bureau of motor vehicles (BMV) from selling the personal information of an individual who: (1) is less than 21 years of age; (2) is 65 years of age or older; or (3) opts out of the sale of the individual's personal information. Prohibits a person to which the BMV provides such information from selling or disclosing the information (sales prohibition). Requires the BMV to provide an easily understandable and easily accessible means by which an individual may opt out of the sale of the individual's personal information. Permits the state board of finance, upon approval by the governor, to transfer funds to the BMV to offset a shortfall in funding for the BMV that occurs in a state fiscal year beginning before July 1, 2028, as a result of the sales prohibition.

Provides that a social media provider that meets specified conditions (provider) may not create an account for an individual who is less than 14 years of age (minor) unless the provider receives verifiable parental consent to creation of the account from a parent of the minor. Requires a provider that creates an account for a minor to: (1) provide the minor's parent with the option of receiving a separate password that allows the parent to set limits on the minor's use of the account; and (2) configure the account in a specified manner, including by disabling access by the account holder to specified features and functionality of the social media platform. Requires a provider to: (1) periodically verify the age of each Indiana account holder; and (2) terminate an account if: (A) the provider determines that the Indiana account holder is a minor; and (B) the provider did not receive verifiable parental consent for the creation of the account; subject to a specified process by which an account holder may dispute the provider's determination. Requires a provider to: (1) provide a minor account holder and the minor's parent with a clearly explained, simple to use, and easily accessible means of terminating the minor's account; and (2) terminate the minor's account within a specified time after receiving a request for the account's termination. Provides requirements for a provider's use and retention of information provided to the provider for purposes of verifiable parental consent. Provides that a provider that creates or maintains an account for a minor in violation of these requirements is subject to a civil action by the minor or a parent of the minor, and specifies remedies available to a prevailing plaintiff in such an action. Provides that the attorney general may independently enforce these requirements under the attorney general's authority to enforce Indiana law regarding unfair trade practices.