United States of America: Consumer Data Protection Act (SB 297) revising Privacy Laws was introduced to Senate

On 11 February 2025, the Consumer Data Protection Act (SB 297) revising Privacy Laws to reform consumer and minors' data protection was introduced into the Montana Senate. The Bill mandates transparency in data processing and grants consumers rights to access, correct, delete, and opt out of the sale or processing of their personal data. It imposes obligations on businesses, requiring them to limit data collection, implement security measures, and provide transparent privacy notices. Special protections are introduced for minors, prohibiting targeted advertising, data sales, and profiling without parental consent. The Montana Attorney General is granted exclusive enforcement authority, with penalties of up to USD 7'500 per violation and a 30-day period for businesses to correct infractions. The Bill also mandates data protection assessments for high-risk processing activities, particularly those involving minors.