Lexology June 4, 2024
On May 24, Minnesota Governor Tim Walz (D) signed the Minnesota Consumer Data Privacy Act (MCDPA) into law. The MCDPA largely aligns with previous state consumer privacy laws, but it introduces some significant and novel variations. These distinctions include requiring controllers to maintain a data inventory, to document and maintain a description of policies and procedures adopted to comply with the MCDPA’s provisions, and to allow consumers to assign their rights to an authorized agent by way of an “Internet link or a browser setting.” With this enactment, Minnesota becomes the 18th U.S. state to enact a comprehensive privacy law. The MCDPA will take effect on July 31, 2025, and will be enforceable by the state attorney general (AG), but...