The Minnesota Consumer Data Privacy Act takes effect July 31, 2025. The Minnesota measure has a few unique requirements among state comprehensive privacy law. Here are a few that deserve a second look:
- Controllers shall maintain an inventory of personal data.
- A controller may not retain personal data that is no longer relevant and reasonably necessary to the purposes for which the data was collected.
- Controllers must document the policies and procedures adopted to comply with the law.
- Consumers may question the results of a controller’s profiling decisions.
- Controllers must maintain records of all appeals and responses for at least 24 months.
Click here to learn more about applicability and for a refresher on the privacy laws going into effect this year.
