Description

Signed Consumer Data Privacy Act (SB 384)

On 19 May 2023, the Consumer Data Privacy Act (SB 384) was signed into law and will enter into force on 1 October 2024. Covered entities include persons conducting business in Montana or producing products or services for residents of Montana with two alternative thresholds that must be met. Either the covered entity has to control the data of at least 100'000 consumers or control the data of at least 25'000 consumers, the sale of which accounts for more than 25% of the company's gross revenue. Under the Bill, a consumer has the right to access their data, the right to deletion, and the right to edit inaccuracies of their personal information. The consumer may also opt out of the use of their personal data for targeted advertising, sale and profiling. Finally, data controllers would be required to set up reasonable data protection practices with regular assessments.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
executive
Government Body
central government

Complete timeline of this policy change

Hide details
2023-02-16
under deliberation

On 16 February 2023, the Consumer Data Privacy Act (SB 384) was introduced in the Montana Senate. C…

2023-04-17
under deliberation

On 17 April 2023, the Consumer Data Privacy Act (SB 384) was passed by the Montana House of Represe…

2023-04-21
adopted

On 21 April 2023, the Consumer Data Privacy Act (SB 384) was adopted after being passed by both the…

2023-05-19
adopted

On 19 May 2023, the Consumer Data Privacy Act (SB 384) was signed into law and will enter into forc…

2024-10-01
in force

On 1 October 2024, the Consumer Data Privacy Act (SB 384) entered into force. The Act applies to co…