Ind. Code § 24-4.9-2-10
"Personal information" means:
(2) an individual's first and last names, or first initial and last name, and one (1) or more of the following data elements that are not encrypted or redacted:
(D) A financial account number or debit card number in combination with a security code, password, or access code that would permit access to the person's account.
The term does not include information that is lawfully obtained from publicly available information or from federal, state, or local government records lawfully made available to the general public.
As added by P.L.125-2006, SEC.6.