Minnesota Consumer Data Privacy Act takes effect

What changed

Consumers can question profiling decisions, controllers must keep a data inventory, and GPC must be honored. The 30-day cure period ran until January 31, 2026.

Who it affects

Entities with data of 100,000+ Minnesota consumers (25,000+ with over 25% of revenue from data sales). Small businesses still need consent to sell sensitive data.

What to do

1. Honor GPC for Minnesota visitors.
2. Keep an inventory of what your site collects and shares.
3. Add profiling rights to your privacy notice.

What ComplyMo already handles

• Global Privacy Control
• Tracker blocking
• Policy drafts
• Daily re-check

Page audits and daily re-checks: Growth and up. Everything else: every plan, from $19 a month.

Sources

• Minn. Stat. 325M.10 to 325M.21 (opens in a new tab)
• Minn. Stat. 325M.12 (scope) (opens in a new tab)

Summary of public sources, not legal advice.