Ratings / Privacy Law
Critical Rating 1 / 5 · Critical — Active surveillance / serious risk.
The ICDPA is rated RED as it is one of the weakest state privacy laws passed in the United States. Unlike stronger statutes, it denies consumers the fundamental rights to correct inaccuracies in their collected personal data or to restrict automated profiling. With zero private r
The ICDPA is rated RED as it is one of the weakest state privacy laws passed in the United States. Unlike stronger statutes, it denies consumers the fundamental rights to correct inaccuracies in their collected personal data or to restrict automated profiling. With zero private right of action, no rulemaking authority for a dedicated regulator, and an extraordinarily generous 90-day cure period for non-compliant businesses, the law acts more as a rubber stamp for industry data practices than a consumer protection mechanism.
The full methodological and legal context for this rating. This card is what we point to when asked to substantiate the claim.