Minnesota Consumer Data Privacy Act - ADM and profiling provisions

MNFor companies using AIMediumseverityIn effect

In effect since

Overview

Minnesota gives consumers opt-out and challenge rights when profiling or automated decisions have legal or similarly significant effects.

This is a privacy law with automated decision-making provisions.

Who this applies to

This regulation applies to companies that use or deploy AI tools and systems built by other vendors. If your company uses AI-powered products in the areas listed below, this regulation may apply to you.

AI categories covered

  • Consumer-facing AI
  • Automated decision-making
  • Algorithmic profiling

Specific AI use cases:

  • Customer profiling and segmentation
  • Credit scoring and risk assessment

What this requires you to do

  • Consumer opt-out required

    Provide an opt-out mechanism. Consumers must be able to opt out of automated decision-making.

  • Profiling disclosure required

    Disclose profiling activities. Inform consumers when you use their data for profiling purposes.

  • Right to human review

    Offer human review. Consumers have the right to request a human review of automated decisions.

  • Data access rights

    Provide data access. Consumers can request access to data collected and used by your AI systems.

Enforcement and penalties

Enforced by the Minnesota Attorney General under the Minnesota Consumer Data Privacy Act. The law includes cure and enforcement procedures set by statute.

Source

Read the full text

https://www.revisor.mn.gov/statutes/cite/325M.14

Always verify current language and amendments at the official source.

Other Minnesota regulations

Explore more rules in the same jurisdiction that may apply to your AI systems.

Want to know what else applies to your company?

Run a free XIRA scan to see all regulations that match your states and AI tools.