Law / United States / Minnesota

Minnesota Consumer Data Privacy Act (MCDPA), general applicability

Minn. Stat. §§ 325M.10 to 325M.21

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 31 July 2025.

A comprehensive regime rule binding private bodies.

As of 27 August 2026.

What it requires

  • Limit your collection of a Minnesota resident's personal data to what is adequate, relevant, and reasonably necessary for the purpose you disclosed to them, and obtain consent before processing it for an undisclosed, incompatible secondary purpose.
  • Confirm whether you are a postsecondary institution regulated by the Minnesota Office of Higher Education before assuming MCDPA already binds you; that sector's compliance date is July 31, 2029, not the general July 31, 2025 date.

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

MCDPA governs private-sector processing of Minnesota residents' personal data, enacted as Laws of Minnesota 2024, chapter 121, article 5. A controller must limit collection to what is adequate, relevant, and reasonably necessary for the disclosed processing purpose, and must obtain consent before processing for an undisclosed, incompatible secondary purpose.

The general effective date, July 31, 2025, binds every controller except postsecondary institutions regulated by the Office of Higher Education, which are not required to comply until July 31, 2029, per the statute's own history note.

When LexLint raises it

  • automated_outreach
  • crawls_web
  • deploys_chatbot
  • processes_biometrics
  • processes_voice
  • trains_models

Read the law

official Minnesota statute text, Minn. Stat. Chapter 325M, Office of the Revisor of Statutes

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example  ·  Lint your app