Sends commercial email, in Minnesota

Minn. Stat. § 325E.59 · Read the law's page

• If you are a person or entity other than a government entity, do not publicly post or publicly display an individual's Social Security number in any manner.
• Do not print an individual's Social Security number on any card the individual must use to access products or services you provide.
• Do not require an individual to transmit the individual's Social Security number over the Internet unless the connection is secure or the number is encrypted, and do not require an individual to use the number to access an Internet website unless a password, unique personal identification number or other authentication device is also required.
• Do not print a number you know to be an individual's Social Security number on materials mailed to the individual unless state or federal law requires it, although applications and forms sent by mail may include it, and never on the outside of a mailing.
• Do not assign or use a number as the primary account identifier that is identical to or incorporates an individual's complete Social Security number, except in conjunction with an employee or member retirement or benefit plan or human resource or payroll administration.
• Do not sell Social Security numbers obtained from individuals in the course of business; a release incidental to a larger transaction that is necessary to identify the individual for a legitimate business purpose is not a sale, and a release for marketing is not a legitimate business purpose.
• Restrict access to the Social Security numbers you hold so that only employees, agents or contractors who need access to perform their job duties have it.

Minn. Stat. § 325F.995 · Read the law's page

• If you are a direct-to-consumer genetic testing company, make available in plain language a high-level privacy policy overview, a prominent public privacy notice covering your collection, consent, use, access, disclosure, maintenance, transfer, security, retention and deletion practices for genetic data, and information on how to file a complaint under section 45.027.
• Obtain a consumer's express consent to collect, use and disclose genetic data: initial consent describing the uses and who has access, separate consent naming the recipient for each transfer to a person other than your vendors and service providers, separate consent for each use beyond the primary purpose, separate consent to retain a biological sample after testing, informed consent under the federal human-subjects rules to transfer data for research, and express consent for marketing based on genetic data.
• Do not disclose genetic data to law enforcement or any other governmental agency without the consumer's express written consent unless the disclosure is made under a valid search warrant or court order.
• Do not disclose a consumer's genetic data without the consumer's written consent, clearly identifying the recipient, to any entity offering health insurance, life insurance, disability insurance or long-term care insurance, or to the consumer's employer.
• Develop, implement and maintain a comprehensive security program and measures to protect a consumer's genetic data against unauthorized access, use or disclosure.
• Provide a process for a consumer to access the consumer's genetic data, delete the consumer's account and genetic data, and request and obtain destruction of the consumer's biological sample.
• Provide effective mechanisms for a consumer to revoke any consent, honor a revocation as soon as practicable and not later than 30 days after it, and destroy a biological sample within 30 days of receipt of revocation of consent to store it.
• Give a consumer clear and complete notice that deidentified data may be shared with or disclosed to third parties for research purposes.
• Bind each service provider by contract not to retain, use or disclose a biological sample, extracted genetic material, genetic data or identity information for any purpose other than the contracted services, and not to associate or combine it with information from another source.