Minnesota Becomes the 18th State to Enact a Comprehensive Consumer Privacy Law
On May 24, 2024, Governor Walz signed into law the Minnesota Consumer Data Privacy Act (MNCDPA). This landmark law is the first set of comprehensive consumer privacy standards specific to Minnesota residents. The law will take effect on July 31, 2025, for most covered entities. Who Must comply with the MNCDPA? The law applies to entities that control or process personal data from a significant number of Minnesota residents, or that derive a significant amount of their gross revenue from the sale of personal data. Specifically, it applies to entities that (1) control or process personal data of at least 100,000 Minnesota residents during a year or, (2) derive over 25% of their gross revenue from selling personal data and process or control personal data of at least 25,000 Minnesota residents . These threshold limits are similar to those in many of the other states that have enacted comprehensive consumer data privacy laws. The MNCDPA also contains several exclusions. For example, ...