Minnesota Consumer Data Privacy Act
The new law establishes data protection rights and provides consumers with a right to access, correct, delete, and obtain a copy of their personal data, and to opt-out of the selling of personal data and/or sharing of personal data for targeted advertising.
Is Complying with MCDPA Mandatory?
The law applies to legal entities that conduct business in Minnesota or produce products or services targeted to Minnesota residents and:
During a calendar year, control or process personal data of 100,000 consumers or more, excluding personal data controlled or processed solely for the purpose of completing a payment transaction; or
Derive over 25% of gross revenue from the sale of personal data and process or control personal data of at least 25,000 consumers.
What are the penalties for not complying with MCDPA?
The Minnesota Attorney General has exclusive authority to enforce the Act. Violators may be subject to an injunction and a civil penalty of up to $7,500 per violation, as well as all or part of the AG's litigation expenses.