Keypoint: The Minnesota bill contains several unique requirements and provisions, including a novel right to question the result of a profiling decision, privacy policy provisions that increase interoperability with existing state laws, and new privacy program requirements such as a requirement for controllers to maintain a data inventory.
On May 19, the Minnesota legislature passed the Minnesota Consumer Data Privacy Act (HF 4757 / SF 4782). The bill, which is sponsored by Representative Steve Elkins, was passed as Article 5 of a larger omnibus bill. The bill next moves to Governor Tim Walz for consideration.
The Minnesota bill largely tracks the Washington Privacy Act model but with some significant and unique variations. For example, the bill creates a novel right to question the result of a profiling decision and have a controller provide additional information regarding that decision. It also contains privacy policy requirements that are intended to increase interoperability with other state consumer data privacy laws. Further, the bill contains provisions requiring controllers to maintain a data inventory and document and maintain a description of policies and procedures the controller has adopted to comply with the bill’s provisions. We discuss those requirements and provisions, along with others, in the below article.
As with prior bills, we have added the Minnesota bill to our chart providing a detailed comparison of laws enacted to date.
In the second podcast of our Legislating Data Privacy series, we talk with Minnesota Representative Steve Elkins.
Keypoint: This week the Connecticut Senate Appropriations Committee and New York Consumer Protection Committee passed their bills, and the Nevada Assembly passed its bill, which would broaden Nevada’s pre-existing right to opt out of sales.
Keypoint: This week the Colorado Privacy Act passed out of the Senate Appropriations Committee, Alaska’s House Labor and Commerce Committee held another hearing on its bill, Connecticut’s bill was sent to the Senate Appropriations Committee, Nevada’s Assembly Committee on Commerce and Labor passed its bill, and the New York Privacy Act was reintroduced.
Keypoint: This week an amended version of the Colorado Privacy Act unanimously passed out of committee, Alaska’s House held another hearing on its bill (and scheduled another hearing for May 12), Connecticut’s bill was tabled for the Senate calendar, and Nevada’s Assembly Committee on Commerce and Labor scheduled a May 10 hearing on its bill.
Keypoint: There were a number of developments this week: Florida’s House passed HB 969, the Washington Privacy Act officially died, Alaska’s HB 159 received a public hearing, and the Arizona legislature closed without passing its bill.
Keypoint: This week Florida’s two bills continued to progress, the Washington Privacy Act failed to pass out of the House at the deadline (but the bill sponsor says it is still alive), new bills were introduced in Pennsylvania and North Carolina, and Maryland’s bill died.
Keypoint: It was another busy week with developments in Washington, Florida, Oklahoma, Alaska, Nevada, and Rhode Island.