Minnesota Enacts Comprehensive Privacy Legislation
Lexology June 4, 2024
Introduction
On May 24, 2024, Governor Walz signed the Minnesota Consumer Data Privacy Act (MCDPA) into law, making Minnesota the latest state to enact comprehensive privacy legislation. The MCDPA provides Minnesota residents (called “consumers”) with significant new privacy rights and imposes substantial obligations on businesses to which it applies. While those rights and obligations largely align with other state privacy laws—particularly those in Colorado, Connecticut, Iowa and Virginia—the MCDPA has some unique elements as discussed below. Businesses subject to the MCDPA have until July 1, 2025, to come into compliance. The following explains the MCDPA’s key requirements.
Applicability
The MCDPA applies to entities that conduct business in Minnesota or produce products or services targeted to Minnesota consumers, if they meet...