Minnesota Consumer Data Privacy Act
Data last verified: March 23, 2026
- Effective Date
- July 31, 2025
- Enforcement Date
- Not specified in statute
Summary
Minnesota Consumer Data Privacy Act provides consumers the right to opt out of profiling for decisions with legal or similarly significant effects, requires meaningful explanation of profiling logic, mandates data protection assessments, and requires privacy notice disclosure of profiling activities. Minnesota's profiling provisions are among the strongest in the country.
Who It Applies To
Applies to businesses processing data of 100,000+ MN consumers, or 25,000+ consumers if deriving 25%+ of gross revenue from the sale of personal data.
- Min Consumers:
- 100,000
Any threshold triggers applicability
Penalties
- Penalty Range
- $0 – $7,500per violation
- Cure Period
- 30-day cure period
- Private Right of Action
- No private right of action
- Enforcement Body
- Minnesota Attorney General
Requirements (4)
- Opt-Out§ 325O.05 Subd. 1(f), Subd. 3
This law provides consumers the right to opt out of profiling in furtherance of a decision that produces legal or similarly significant effects concerning the consumer.
- Explanation§ 325O.05 Subd. 1(g)
This law provides consumers the right to obtain a meaningful explanation of profiling activities and the logic used.
- Impact Assessment§ 325O.08(b)
This law requires controllers to conduct data protection assessments for processing activities involving profiling, targeted advertising, sale of personal data, or sensitive data.
- Disclosure§ 325O.07 Subd. 1(a)-(b)
This law requires controllers to provide a clear and accessible privacy notice disclosing data processing practices, including profiling activities.
Claire tracks 31 state and local AI laws across 23 US states. No prescriptive federal AI compliance statutes have been enacted. EU AI Act and sector-specific regulations are not covered.
Check if this law applies to your business