Sec. 3. Unless otherwise prohibited by law, any state agency that maintains a personal information system shall, upon request and proper identification of any data subject, or a data subject's authorized agent, grant the subject or agent the right to inspect and to receive at reasonable, standard charges for document search and duplication, in a form comprehensible to the subject or agent:
(a) all personal information about the data subject, unless otherwise provided by statute, whether the information is a matter of public record or maintained on a confidential basis, except in the case of medical and psychological records, where the records shall, upon written authorization of the data subject, be given to a physician or psychologist designated by the data subject;
(b) the nature and sources of the personal information, except where the confidentiality of the sources is required by statute; and
(c) the names and addresses of any recipients, other than those with regular access authority, of personal information of a confidential nature about the data subject, and the date, nature, and purpose of the disclosure.
As added by Acts 1977, P.L.21, SEC.1. Amended by P.L.215-2016, SEC.3.
Structure Indiana Code
Title 4. State Offices and Administration
Article 1. Miscellaneous Provisions
Chapter 6. Fair Information Practices; Privacy of Personal Information
4-1-6-2. Personal Information System
4-1-6-4. Disclosures Limited to Business Hours; Standard Charges
4-1-6-5. Challenge of Information by Data Subject; Notice; Minimum Procedures
4-1-6-6. Securing of Confidential Information Protected
4-1-6-7. State Agencies Maintaining One or More Systems; Requirements
4-1-6-8. Policy of Access; Restricted Access as Condition for Receipt of Donated Materials
4-1-6-8.5. Consistent Handling of Information Among and Between Agencies; Principles and Procedures
4-1-6-8.6. Requests for Access to Confidential Records; Improper Disclosure; Actions