Security Freezes for Consumer Reports
IN Security Freeze
Credit reporting
Indiana residents may freeze their credit reports for free so that agencies cannot release them without the consumer's authorization. Agencies must confirm a freeze and issue a PIN or password, and must lift or remove a freeze within set times. The federal Economic Growth, Regulatory Relief, and Consumer Protection Act of 2018 (15 U.S.C. 1681c-1(i)) now also sets nationwide free-freeze rules and timelines.
- Where
- Indiana
- Citation
- Ind. Code ch. 24-5-24 (IC 24-5-24-1 to 24-5-24-17)
- Status
- In force
- Last amended
- 2026-07-01
- Enforced by
- Indiana Attorney General; consumers
- People can sue
- Yes
- Penalties
- Consumers may sue for knowing or intentional violations: the greater of actual damages or $500 (capped at $6,000), plus punitive damages, costs, and attorney's fees (IC 24-5-24-15). AG civil penalty up to $2,500 per consumer, or $100,000 total for related violations affecting multiple consumers (IC 24-5-24-16).
- Applies to
- Consumer reporting agencies holding reports on Indiana residents; third parties that request reports for credit applications (IC 24-5-24-1, 24-5-24-3, 24-5-24-8)
What a privacy notice must say
- Include a statutory notice of the right to a security freeze with each FCRA section 609 disclosure.IC 24-5-24-13
- While a freeze is in place, send written confirmation of changes to the consumer's name, birth date, SSN, or address.IC 24-5-24-12
Rights it gives people
- Consumers may place a security freeze by mail or secure electronic request; the agency must confirm within 10 business days and issue a unique PIN or password that is not SSN-based.IC 24-5-24-5, 24-5-24-6
Practices it requires
- While a freeze is in place, do not release the report without the consumer's authorization; honor temporary lifts within 3 business days of a mailed request or 15 minutes of an electronic request.IC 24-5-24-7
- Remove a freeze within the statutory deadlines when the consumer asks.IC 24-5-24-9
- Do not charge for placing, lifting, or removing a freeze or for reissuing a PIN.IC 24-5-24-14
Sources
- Official text
- Indiana Code 2026, Title 24, Chapter 5-24 (Indiana General Assembly)
- SEA 169 (2026), P.L.115-2026, SECTION 33 amending IC 24-5-24-3, effective July 1, 2026
Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.
Unverified: The original P.L.104-2007 effective date was not confirmed. | The removal deadlines in IC 24-5-24-9(c) were only partly read (3 business days for mailed requests).
Research reference, not legal advice.