Ind. Code § 24-4-14-8
A person who disposes of the unencrypted, unredacted personal information of a customer without shredding, incinerating, mutilating, erasing, or otherwise rendering the information illegible or unusable commits a Class C infraction. However, the offense is a Class A infraction if:
As added by P.L.125-2006, SEC.5.