Big Sky, Bigger Privacy: Montana Broadens Its Consumer Data Privacy Act

On May 8, Montana Governor Greg Gianforte signed into law Senate Bill 297 (SB 297), a bill that significantly revises the existing Montana Consumer Data Privacy Act (MCDPA). Although the MCDPA took effect on October 1, 2024, SB 297 accelerates Montana's march toward a more protective, minors-focused privacy regime and further aligns the statute with provisions in other states, including Colorado, Connecticut, and Minnesota. The amendments take effect on October 1, 2025, and merit immediate attention from businesses operating in Montana – particularly those offering online products or services that may reach children or teenagers. Below is an overview of the most consequential changes.