United States of America: Consumer Data Protection Act (SB 297) revising Privacy Laws including data protection assessments for high-risk processing enters into force

Description

Consumer Data Protection Act (SB 297) revising Privacy Laws including data protection assessments for high-risk processing enters into force

On 1 October 2025, provisions of the Consumer Data Protection Act (SB 297) concerning data protection assessments for high-risk processing involving minors enter into force. The Act amends state privacy legislation by setting requirements on transpa…

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
executive
Government Body
central government

Complete timeline of this policy change

Hide details
2025-02-11
under deliberation

On 11 February 2025, the Consumer Data Protection Act (SB 297) revising Privacy Laws to reform cons…

2025-02-24
under deliberation

On 24 February 2025, the Montana Senate passed the Consumer Data Protection Act (SB 297), an Act am…

2025-05-01
adopted

On 1 May 2025, the Consumer Data Protection Act (SB 297), an Act amending state privacy protections…

2025-05-08
adopted

On 8 May 2025, the Governor of Montana signed the Consumer Data Protection Act (SB 297), an Act rev…

2025-10-01
in force

On 1 October 2025, provisions of the Consumer Data Protection Act (SB 297) concerning data protecti…