Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 10 JULY 2023

Montana Enacts Privacy Law

Taft, Stettinius & Hollister LLP
Explore more from Taft, Stettinius & Hollister LLP

On May 19, 2023, Montana Governor Greg Gianforte signed the Montana Consumer Data Privacy Act (the "MTCDPA") into law, becoming the ninth state to enact a comprehensive consumer privacy act.

United StatesPrivacy
Scot Ganow
Scot Ganow
Author LinkedIn connections

On May 19, 2023, Montana Governor Greg Gianforte signed the Montana Consumer Data Privacy Act (the "MTCDPA") into law, becoming the ninth state to enact a comprehensive consumer privacy act. Montana joins California, Colorado, Connecticut, Indiana, Iowa, Utah, and Virginia with legislation that protects their residents' personal data.

The MTCDPA will go into effect on October 1, 2024. In preparation for MCTDPA to be signed into law, companies doing business in Montana should start thinking of ways to incorporate the law's requirements into their existing privacy policies and procedures.

Who Must Comply?

The MTCDPA will apply to people that conduct business in Montana or have products and services targeted to residents of the state that:

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

SB 54 Is In Effect: What California’s New Packaging Law Means For Your Business

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.
United StatesPrivacy
Wilson Elser Moskowitz Edelman & Dicker LLP
Wilson Elser Moskowitz Edelman & Dicker LLP
Article

California’s 2026 Legislative Session Wraps: A Wave Of Privacy And AI Bills Reaches The Governor, With Key Child Safety And AI Measures Signed Into Law

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?
United StatesPrivacy
Kelley Drye & Warren LLP
Kelley Drye & Warren LLP
Article

California's Fall 2026 Privacy Roundup: Expanded CCPA Deletion Rights And More

California Governor Gavin Newsom has signed several significant privacy bills that will reshape how businesses handle consumer data, including expanded deletion rights under the CCPA, shortened data broker response cycles, and sweeping new insurance sector privacy requirements. While one landmark bill banning the sale of sensitive personal information was vetoed, the approved legislation requires companies to update their deletion workflows...
United StatesPrivacy
McDermott Will & Schulte
McDermott Will & Schulte
Article

The Data Breach Brief: Week Of September 30th, 2026

Multiple organizations have recently disclosed significant data breaches affecting thousands of individuals, with compromised information ranging from basic contact details to highly sensitive medical records and financial data. The incidents span various sectors including healthcare, insurance, and professional services, raising questions about the scope of exposure and potential remedies for affected individuals.
United StatesPrivacy
Morgan & Morgan
Morgan & Morgan
Article

Emerging Enforcement Trends In Digital Health Data Privacy: Lessons From Washington’s My Health My Data, FTC vs. Hims & Hers And UCHealth Enforcement Actions

Federal and state regulators are intensifying scrutiny of healthcare and digital health companies over tracking technologies that share sensitive patient data with advertising platforms. Recent enforcement actions against major telehealth providers and healthcare systems reveal how common marketing practices can trigger significant legal liability under privacy laws, even for organizations not covered by HIPAA.
United StatesPrivacy
Benesch, Friedlander, Coplan & Aronoff LLP
Benesch, Friedlander, Coplan & Aronoff LLP
Article

Eleventh Circuit Developments: Decisions On Florida And Georgia Social Media/Minor Laws And New Alabama Law

Legal risk intensifies for companies offering online interactive features to minors across Georgia, Florida, and Alabama as the Eleventh Circuit vacates preliminary injunctions against state social media laws. With Florida's HB 3 and Georgia's SB 351 now enforceable and Alabama's HB 161 set to take effect January 1, 2027, businesses face divergent compliance requirements including age verification, parental consent mechanisms, and account deletion protocols.
United StatesPrivacy
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

Eleventh Circuit Developments: Decisions On Florida And Georgia Social Media/Minor Laws And New Alabama Law

Legal risk intensifies for companies offering online interactive features to minors across Georgia, Florida, and Alabama as the Eleventh Circuit vacates preliminary injunctions against state social media laws. With Florida's HB 3 and Georgia's SB 351 now enforceable and Alabama's HB 161 set to take effect January 1, 2027, businesses face divergent compliance requirements including age verification, parental consent mechanisms, and account deletion protocols.
United StatesPrivacy
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

The Big Long List Of U.S. AI Laws

State legislatures across the U.S. have enacted a complex web of AI regulations affecting private sector businesses, spanning employment decisions, healthcare applications, consumer interactions, and digital rights. These laws impose compliance obligations including bias audits, disclosure requirements, and restrictions on automated decision-making, with enforcement mechanisms ranging from regulatory oversight to private rights of action. Understanding which state laws apply to your AI systems is critical,
United StatesCorporate/Commercial Law
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

AI-Powered Call Transcription Tools Present Class Action BIPA Risk

AI-powered call transcription tools like Otter.ai are facing class action lawsuits under Illinois' Biometric Information Privacy Act (BIPA) for allegedly collecting voiceprints without proper consent. A federal court recently allowed claims to proceed, signaling potential legal risks for companies that provide or utilize these increasingly common meeting recording services.
United StatesIntellectual Property
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

D.C. Circuit Rules Pentagon Can Exclude Anthropic From Supply Chain

The U.S. Court of Appeals for the D.C. Circuit has ruled that the Department of War can exclude Anthropic from its supply chain under the Federal Acquisition Supply Chain Security Act, finding that the AI company's ability to manipulate its Claude model creates a supply chain risk. This decision contrasts with an earlier California district court ruling that blocked a similar designation under a different statute, creating a complex legal landscape for AI providers and government contractors.
United StatesGovernment, Public Sector
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

SEC Proposes Rule Changes And Seeks Comments On Additional Accredited Investor Pathways

The Securities and Exchange Commission has proposed six new pathways for individuals to qualify as accredited investors, moving beyond traditional income and wealth thresholds. These changes would allow qualification through professional certifications like CPA, CFA, and CFP designations, as well as through a new FINRA-administered exam testing securities knowledge.
United StatesFinance and Banking
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

Quick Update: Delaware Privacy Act Amendments, CCPA Data Broker Enforcement, And Texas Warning On CIPA Demand Letters

Recent developments in Delaware, California, and Texas highlight a common theme that privacy compliance risk is becoming more operational and technical and more likely to arise from practices that may once have appeared routine. (1) Delaware has expanded the reach and substantive requirements of its comprehensive privacy law; (2) California continues its focus on data brokers by bringing a Delete Act action against a data broker; and (3) the Texas Attorney General has warned businesses about a surge in CIPA website tracking demand letters.
United StatesPrivacy
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

Illinois' Clean And Reliable Grid Affordability Act Enacts New Statewide Zoning Standards For Energy Storage Systems

Illinois has enacted the Clean and Reliable Grid Affordability Act, establishing comprehensive statewide zoning and permitting standards for commercial energy storage systems with capacity exceeding 1 MW. The legislation creates uniform requirements for setbacks, decommissioning, financial assurance, and safety standards while limiting local governments' ability to impose more restrictive regulations.
United StatesEnergy and Natural Resources
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP