A controller shall provide consumers with a reasonably accessible, clear, and meaningful privacy notice that includes:

1. (1) the categories of personal data processed by the controller;
2. (2) the purpose for processing personal data;
3. (3) how consumers may exercise their consumer rights under IC 24-15-3 , including how a consumer may appeal a controller's decision with regard to the consumer's request;
4. (4) the categories of personal data that the controller shares with third parties, if any; and
5. (5) the categories of third parties, if any, with whom the controller shares personal data.

As added by P.L.94-2023, SEC.1.