Page 195 - GDPR and US States General Privacy Laws Deskbook

24-15-1-3 Compliance with federal law
Sec. 3. A:
(1) controller; or
(2)  processor; that complies with the Children’s Online Privacy Protection Act (15 U.S.C. 6501 et seq.), and with any
rules or regulations under that act, satisfies any obligation to obtain parental consent under this article.
24-15-2-0.5 Application of definitions
Sec. 0.5. The definitions in this chapter apply throughout this article.
24-15-2-1 “Affiliate”
Sec. 1. (a) “Affiliate” means a legal entity that:
(1) controls, is controlled by, or is under common control with another legal entity; or
(2) shares common branding with another legal entity.
(b) For purposes of this section, “control”, with respect to a company, means:
(1)  ownership of, or the power to vote, more than fifty percent (50%) of the outstanding shares of any class of
voting security of the company;
(2)  control in any manner over the election of a majority of the directors or of individuals exercising similar functions;
or
(3) the power to exercise controlling influence over the management of the company.
24-15-2-2 “Aggregate data”
Sec. 2. “Aggregate data” means information:
(1) that relates to a group or category of consumers;
(2) from which individual consumer identities have been removed; and
(3) that is not linked or reasonably linkable to any consumer.
24-15-2-3 “Authenticate”
Sec. 3.  “Authenticate” means to verify through reasonable means that a consumer who is entitled to exercise the personal
data rights provided by IC 24-15-3 is the same consumer exercising such rights with respect to particular personal
data.
195 | Indiana Code Concerning Trade Regulation