Minnesota Becomes The Next State To Enact A Comprehensive Data Protection Law

On May 24, 2024, Minnesota Governor Tim Walz signed the Minnesota Consumer Data Privacy Act (MCDPA), which will go into effect on July 31, 2025.

The law applies to entities that within a calendar year: (1) control or process personal data of at least 100,000 Minnesota residents; or (2) derive over 25% of their gross revenue from selling personal data and process or control personal data of at least 25,000 Minnesota residents within a calendar year.

The law also provides Minnesota residents with the following rights:

• The right to access personal data;
• The right to correct personal data;
• The right to delete personal data;
• The right to data portability; and
• The right to opt out of targeted advertising, sale of personal data, and profiling.