Camera-related state law

The governing audio statute is Ind. Code 35-33.5, the Indiana Wiretap Act. The Act prohibits interception of telephonic or telegraphic communications without the consent of a party to the communication, making it a felony in most circumstances. Because consent of one party is sufficient, Indiana is a one-party consent state for audio recording.

Video-only surveillance of common areas with posted notice is generally lawful. Ind. Code 35-46-8.5 makes voyeurism a criminal offense and reaches hidden cameras in places where privacy is reasonably expected (restrooms, dressing rooms, hotel guest rooms). Posted notice at the entrance is the industry standard for any commercial property.

Practical translation. Commercial IN camera installs default to video-only on the cameras and route audio capture through a separate documented intercom or call-recording workflow.

Alarm and security contractor licensing

Indiana licenses alarm system contractors at the state level. The Indiana Professional Licensing Agency (PLA), through the Indiana Alarm and Security Systems Board, administers the program under IC 25-10.5. Companies installing burglar, fire, or electronic security alarm systems for compensation must hold a current state license, and individual installers must meet the board's qualification rules.

For commercial buyers, the practical takeaway is that any vendor installing alarm or electronic security in Indiana should provide a current PLA license number on the proposal. Buyers can verify the license at in.gov/pla. Counties and cities (Indianapolis, Fort Wayne, Evansville, South Bend, Bloomington) often require local alarm permits on top of state licensure.

Biometric data and breach notification

Indiana has not enacted a comprehensive consumer privacy law on the model of CCPA or VCDPA as of early 2026. The Indiana Disclosure of Security Breach Act, Ind. Code 24-4.9, is the primary regulatory anchor for biometric records held by businesses. The Act requires notice to Indiana residents and the Indiana Attorney General following discovery of a breach affecting unencrypted personal information, which expressly includes biometric data used for unique identification.

For commercial security buyers, the practical reach is fingerprint and facial-recognition access control and any AI camera that builds a faceprint template. Operators document consent at enrollment, retain biometric templates only as long as the operational purpose requires, and apply reasonable physical and technical safeguards under the breach-act standard.

Privacy in the workplace

Indiana does not have a single workplace electronic-monitoring statute. Pure video surveillance of common work areas with posted notice is the routine pattern. Cameras in employee-only spaces with a reasonable expectation of privacy (restrooms, locker rooms, lactation rooms) are off-limits.

Most IN employers issue a single workplace surveillance notice in the employee handbook covering cameras, badge access, computer monitoring, and call recording. Audio capture is regulated by Ind. Code 35-33.5 (one-party consent). Manufacturing employers in the Indianapolis-Fort Wayne-Elkhart manufacturing corridor commonly add badge-tied access control to production zones and document the data-handling workflow alongside the surveillance notice.

Video retention requirements

  • Healthcare. HIPAA Security Rule (45 CFR Part 164) governs PHI-touching footage. Retention is typically 30 to 90 days at the facility.
  • Retail and hospitality. PCI-DSS Requirement 9 specifies camera coverage of the cardholder data environment with 90-day retention.
  • Federal contractors. NDAA Section 889 controls vendor selection. Retention is contractor-driven through the SSP.
  • Schools. FERPA reach for K-12 districts and higher education. Indiana Secured School Safety Grant projects follow grant-award terms.
  • Hemp and CBD. Indiana has no recreational cannabis program. Hemp operators follow USDA and Indiana State Department of Agriculture rules.

Default retention for IN commercial systems with no specific industry rule is 30 days. Operators in higher-risk industries set longer retention with explicit written retention policies.

What Tec-Tel does to comply with Indiana regulations

  • Video-only on cameras unless audio is documented with one-party consent under Ind. Code 35-33.5.
  • Posted surveillance notice at every public entrance.
  • No cameras in restrooms, locker rooms, dressing rooms, hotel guest rooms, or any space where privacy is reasonably expected.
  • Biometric capture documented at enrollment with a written retention and destruction schedule.
  • Retention configured to the regime that governs the industry (HIPAA, PCI, NDAA), with the facility's written retention policy attached.
  • NDAA Section 889-compliant vendor selection on federal-touching installs.
  • PLA-licensed alarm contractor work where the install scope triggers IC 25-10.5.

This is a buyer-facing reference, not legal advice. For a specific Indiana regulatory question, work with your privacy counsel.

Security service in Indiana

Tec-Tel deploys AI-era security across Indiana with one accountable project manager owning design, install, and service to one standard. The cities below have local service detail, deal sizing, and a free consultation. Don't see yours? We cover the whole state.

Or browse the full city directory and nationwide coverage map.