Page 200 - GDPR and US States General Privacy Laws Deskbook

(A) intentionally made available to the general public via a channel of mass media; and
(B) did not restrict to a specific audience; or
(5)  the disclosure or transfer of personal data to a third party as an asset that is part of a proposed or actual
merger, acquisition, bankruptcy, or other transaction in which the third party assumes control of all or part of
the controller’s assets.
24-15-2-28 “Sensitive data”
Sec. 28. “Sensitive data” means a category of personal data that includes any of the following:
(1)  Personal data revealing racial or ethnic origin, religious beliefs, a mental or physical health diagnosis made by a
health care provider, sexual orientation, or citizenship or immigration status.
(2) Genetic or biometric data that is processed for the purpose of uniquely identifying a specific individual.
(3) Personal data collected from a known child.
(4) Precise geolocation data.
24-15-2-29 “State agency”
Sec. 29. “State agency” has the meaning set forth in IC 1-1-15-3.
24-15-2-30 “Targeted advertising”
Sec. 30. (a)  “Targeted advertising” means the displaying of an advertisement to a consumer in which the advertisement
is selected based on personal data obtained from that consumer’s activities over time and across nonaffiliated
websites or online applications to predict the consumer’s preferences or interests.
(b) The term does not include:
(1) advertisements based on activities within a controller’s own or affiliated websites or online applications;
(2) advertisements based on the context of a consumer’s current search query, visit to a website, or online
application;
(3) advertisements directed to a consumer in response to the consumer’s request for information or feedback; or
(4) the processing of personal data solely for measuring or reporting advertising performance, reach, or frequency.
24-15-2-31 “Third party”
Sec. 31.  “Third party”, with respect to a context to which this article applies, means a natural or legal person, public authority,
agency, or body other than:
(1) the consumer;
(2) the controller;
(3) the processor; or
(4) an affiliate of the processor or the controller.
200 | Indiana Code Concerning Trade Regulation