A Legal Guide to PRIVACY AND DATA SECURITY 2025

January 1, 2023, added a new well-funded enforcement agency known as the California Privacy Protection Agency which will likely increase the number of enforcement actions. Massachusetts has become known as the state with the strongest data security laws and regulations and requires a written information security program of you collect personal data of Massachusetts residents. In this section of the Guide, we first cover Minnesota laws related to data privacy and security followed by the laws of other states that became effective in 2024. Minnesota Data Privacy and Security Laws Minnesota Enacts Comprehensive Data Privacy Law Minnesota became the 19th state to pass a comprehensive data privacy law. On May 24, 2024, Governor Tim Walz signed into law the Minnesota Consumer Privacy Act (H.F. 4757) (the “MCPA”), which takes effect July 31, 2025. Who Is Covered? The MCPA covers legal entities that conduct business in Minnesota or produce products or services targeted to state residents and that satisfy one or more of the following: (1) during a calendar year, control or process the personal data of at least 100,000 consumers (excluding payment transactions) (2) derive over 25% of gross revenue from the sale of personal data and processes or controls the personal data of at least 25,000 consumers.

80

Made with FlippingBook - Online Brochure Maker