Consumer Data Privacy
Your rights under Minnesota's Consumer Data Privacy Act to know what personal data companies collect about you, request its deletion, and opt out of certain uses.
Minnesota passed the Consumer Data Privacy Act, which gives residents new rights over their personal data. This law went into effect on July 31, 2025. It applies to companies that do business in Minnesota and handle a certain amount of consumer data.
Under this law, you have several key rights. You can ask a company what personal data they have collected about you (the right to access). You can ask them to correct data that is wrong (the right to correct). You can ask them to delete your data (the right to delete). You can also opt out of the sale of your personal data, targeted advertising, and certain types of automated profiling that could affect you.
Companies must respond to your requests within a set time frame. If a company does not follow the law, the Minnesota Attorney General can take enforcement action. This law is part of a growing movement across the country to give people more control over their personal information.
Why it matters: Every day, companies collect data about what you buy, where you go online, and what you do. Minnesota law now gives you tools to find out what is being collected and to say “no” to uses you are not comfortable with. You do not have to just accept whatever a company decides to do with your information.
Example: Tom, who lives in Maple Grove, notices that after searching for running shoes online, he starts seeing shoe ads everywhere. Under the Consumer Data Privacy Act, Tom can contact the companies showing those ads and opt out of targeted advertising. He can also request to see what data they have about him and ask them to delete it.
When a company collects your personal information, when you see privacy policies or cookie consent banners, or when you want to control how your data is used