Montana's Consumer Data Privacy Law Update: SB 297's Sweeping Changes At A Glance

On May 8, 2025, Montana Governor Greg Gianforte signed Senate Bill 297 (SB 297) into law, significantly revising the existing Montana Consumer Data Privacy Act (MCDPA).

These amendments generally mirror requirements in other states, including creating additional protections for minors, broadening transparency requirements, and removing the cure period. Montana also expanded the applicability of the MCDPA to more entities, and updated consumers' rights and protections with respect to sensitive data and use of data for automated decision-making. Notably, with the passage of SB 297, Montana now has the lowest applicability threshold for businesses that control or process personal data, meaning that the MCDPA may now cover more businesses.