IN HB1360

Adds definitions for "data scraping" (automated extraction of data from websites) and "phishing" (fraudulent communications to obtain information) to Indiana's public records law, effective July 1, 2026.

Authorizes public agencies to establish electronic portals for public records requests that include CAPTCHA verification, physical address verification, Indiana residency indication, and tracking of suspected automated or malicious requests.

Permits public agencies to decline records requests suspected of being data scraping, phishing, or posing cybersecurity risks, with mandatory notification to the public access counselor within 7 days.

Allows public agencies to charge non-Indiana residents a supplemental fee of up to $0.25 per page and $25 per hour of staff time, and to prioritize Indiana residents and civic/journalistic/academic requests over out-of-state or automated requests.

Requires the public access counselor to coordinate tracking of public records request volumes, establish standardized reporting mechanisms for suspicious requests, and include summary data and recommendations in annual reports to the legislature.