Description

Introduction of Minnesota bill including data protection measures

The Minnesota House Docket 1942 is introduced in the Minnesota Legislature. The Act applies to businesses that yearly process personal data of at least 100'000 consumers (or at least 25'000 consumers and derives over 25 per cent of their revenue from the sale of personal data). Particularly, the Act introduces the consumer rights to data access, deletion and rectification and allows the consumers to opt-out from any data processing, collection, storage or sale pursued by a covered business.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2021-02-22
under deliberation

The Minnesota House Docket 1942 is introduced in the Minnesota Legislature. The Act applies to busi…

2021-05-17
rejected

As the Minnesota Consumer Data Privacy Act (H.F. 1492) was not passed by end of the 92nd legislativ…

Key regulatory dimensions

Regulated subjects

The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type Private organisation
Economic activity cross-cutting
Category All
2
Type Private organisation
Economic activity cross-cutting
Category All

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.
personal data (all forms): data processing
Regulatory tool
User right to rectification of personal data
User right to access personal data
User right to deletion of personal data
Portability or interoperability requirement
Complaint mechanism requirement
Sanctions
Regulated subjects
1 2
personal data (all forms): storage (any form)
Regulatory tool
User right to rectification of personal data
User right to access personal data
User right to deletion of personal data
Duty of care requirement
Portability or interoperability requirement
Complaint mechanism requirement
Sanctions
Regulated subjects
1 2
personal data (all forms): sale
Regulatory tool
User consent: Permit user opt-out
Complaint mechanism requirement
Sanctions
Regulated subjects
1 2
advertisement (any targeting): data processing
Regulatory tool
User consent: Permit user opt-out
Complaint mechanism requirement
Sanctions
Regulated subjects
1 2

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.

personal data (all forms): data processing

personal data (all forms): storage (any form)

personal data (all forms): sale

advertisement (any targeting): data processing