Minnesota Privacy Compliance Checklist

Minnesota Consumer Data Privacy Act — Step-by-step guide to compliance

Compliance Steps

Effective: July 31, 2025 | Cure period: 30 days

1
Determine applicability based on Minnesota consumer data processing volumes and revenue thresholds
2
Prepare to implement universal opt-out signal recognition by January 1, 2026
3
Update privacy notices with all MCDPA-required disclosures including algorithmic decision-making
4
Implement consumer rights request mechanisms with 45-day response period
5
Obtain opt-in consent for processing sensitive personal data
6
Conduct data protection assessments for high-risk processing activities
7
Review data minimization practices to ensure compliance with MCDPA requirements

Key Enforcement Details

Enforced By

Minnesota Attorney General

Penalty / Violation

$7,500

Cure Period

30 days

Private Right of Action

Disclaimer: PrivacyLawMap provides general information about US state privacy laws for educational purposes only. This is NOT legal advice. Privacy laws are complex and frequently amended. Consult with a qualified privacy attorney for advice specific to your business. PrivacyLawMap makes no warranties about the accuracy or completeness of this information.