Data security.

Removes the remedies from chapter 3 of the data security breach statute and adds a reference to relief available under chapter 4 of that statute. (Under current law, the maximum civil penalty in chapter 3 is $5,000 per deceptive act.) Changes the civil penalty under chapter 4 of the data security breach statute to $500,000 per deceptive act. (Under current law, the maximum civil penalty in chapter 4 is $150,000 per deceptive act.) Adds the following to the permissible remedies available for the attorney general to seek for a deceptive act: (1) Restitution for actual harm, but not less than $100 per Indiana resident who suffered actual harm. (2) The cost of administering restitution.