PrivacyUnited States - Minnesota
Minnesota Consumer Data Privacy Act
What is Minnesota Consumer Data Privacy Act?
Minnesota Consumer Data Privacy Act (MCDPA) - a state law enacted in 2023 that establishes consumer data privacy rights, data protection obligations for businesses, and enforcement mechanisms, effective July 31, 2024.. It comprises 8 controls organised across 8 domains, and applies in the United States - Minnesota.
How Minnesota Consumer Data Privacy Act maps to other frameworks
All 8 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 8 domains Minnesota Consumer Data Privacy Act groups its controls into
Enforcement Sanctions and Data Broker Registration - Minnesota CDPA
Processor Contract Security and Pseudonymisation - Minnesota CDPA
Data Privacy Assessment - Minnesota CDPA
Chief Privacy Officer Governance - Minnesota CDPA
Universal Opt-Out Sensitive and Health Data - Minnesota CDPA
Where Minnesota Consumer Data Privacy Act overlaps with the standards you already hold
Minnesota Consumer Data Privacy Act vs ISO 27001:2022View comparison →Minnesota Consumer Data Privacy Act vs SOC 2View comparison →Minnesota Consumer Data Privacy Act vs NIST CSF 2.0View comparison →Minnesota Consumer Data Privacy Act vs GDPRView comparison →Minnesota Consumer Data Privacy Act vs HIPAAView comparison →Minnesota Consumer Data Privacy Act vs PCI DSS 4.0View comparison →
What Minnesota Consumer Data Privacy Act means in your sector
Minnesota Consumer Data Privacy Act for Healthcare→Minnesota Consumer Data Privacy Act for Financial Services→Minnesota Consumer Data Privacy Act for Technology→Minnesota Consumer Data Privacy Act for Government→Minnesota Consumer Data Privacy Act for Manufacturing→Minnesota Consumer Data Privacy Act for Energy→Minnesota Consumer Data Privacy Act for Retail→Minnesota Consumer Data Privacy Act for Education→
What Minnesota Consumer Data Privacy Act means for your job
Minnesota Consumer Data Privacy Act for CISOs→Minnesota Consumer Data Privacy Act for Compliance Officers→Minnesota Consumer Data Privacy Act for Risk Managers→Minnesota Consumer Data Privacy Act for IT Directors→Minnesota Consumer Data Privacy Act for DPOs→Minnesota Consumer Data Privacy Act for Auditors→
Questions people ask about Minnesota Consumer Data Privacy Act
What is Minnesota Consumer Data Privacy Act?
Minnesota Consumer Data Privacy Act (MCDPA) - a state law enacted in 2023 that establishes consumer data privacy rights, data protection obligations for businesses, and enforcement mechanisms, effective July 31, 2024..
How many controls does Minnesota Consumer Data Privacy Act have?
Minnesota Consumer Data Privacy Act contains 8 controls organized across 8 domains.
Where does Minnesota Consumer Data Privacy Act apply?
Minnesota Consumer Data Privacy Act is applicable in United States - Minnesota. Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.
What frameworks does Minnesota Consumer Data Privacy Act map to?
Minnesota Consumer Data Privacy Act has control-to-control mappings with 136 other compliance frameworks in our database. Use our compliance platform to explore these mappings interactively.
How do I get started with Minnesota Consumer Data Privacy Act compliance?
Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.
Query Minnesota Consumer Data Privacy Act programmatically
Minnesota Consumer Data Privacy Act, its 8 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
Minnesota Consumer Data Privacy Act API reference and MCP config →What Minnesota Consumer Data Privacy Act requires, control by control
Each page carries the requirement text for one Minnesota Consumer Data Privacy Act control and what an assessor expects to see as evidence.
- MN-CDPA-CHIEF-PRIVACY-OFFICER-SECTION-325O-06-MN-UNIQUE-DESIGNATION-PRIVACY-PROGRAMME-TRAINING Minnesota CDPA Chief Privacy Officer + Section 325O.06 + MINNESOTA-UNIQUE Designation + Privacy Programme + Training
- MN-CDPA-CONSUMER-RIGHTS-SECTION-325O-04-ACCESS-CORRECT-DELETE-PORTABILITY-LIST-THIRD-PARTIES-OPT-OUT-APPEAL-AIQUEST-PROFILE Minnesota CDPA Consumer Rights + Section 325O.04 + Access + Correct + Delete + Portability + List of Third Parties + Opt-Out + Appeal + AI Question Profile
- MN-CDPA-DATA-PRIVACY-ASSESSMENT-DPIA-SECTION-325O-07-SENSITIVE-TARGETED-SALE-PROFILING-AI-CONSUMER-HEALTH Minnesota CDPA DPIA + Section 325O.07 + Sensitive + Targeted + Sale + Profiling + AI + Consumer Health
- MN-CDPA-ENFORCEMENT-AG-ELLISON-SECTION-325O-10-USD-7500-PER-VIOLATION-DATA-BROKER-REGISTRATION-325O-13-SUNSET-25-JAN-2026 Minnesota CDPA Enforcement + AG Ellison + Section 325O.10 + USD 7,500 Per Violation + Data Broker Registration + Sunset 25 January 2026
- MN-CDPA-PROCESSOR-CONTRACT-SECURITY-SECTION-325O-08-PSEUDONYMISATION-SECTION-325O-09-DE-IDENTIFICATION Minnesota CDPA Processor + Section 325O.08 + Security + Pseudonymisation + Section 325O.09 + De-Identification
- MN-CDPA-UNIVERSAL-OPT-OUT-GPC-SENSITIVE-DATA-SECTION-325O-02-CONSUMER-HEALTH-DATA-CHILDREN-KNOWN-CHILD-TRANSGENDER Minnesota CDPA Universal Opt-Out + GPC + Sensitive + Section 325O.02 + Consumer Health Data + Children + Known Child + Transgender
How ready are you for Minnesota Consumer Data Privacy Act?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.
Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .