MN HF2975

Providers of audio or video data must obtain express written consent from Minnesota residents before sharing that data with third parties, and cannot refuse services to consumers who decline to share their data.

Consent notices must clearly disclose the third party's name, the timeframe of data being shared, the stated purposes for obtaining the data, and the consumer's rights under this law.

Providers have 30 days to cure any alleged breach after receiving notice of noncompliance, or face civil penalties of up to $2,500 for unintentional violations or $7,500 for intentional violations.

The law exempts providers from consent requirements when complying with federal, state, or local laws; legal inquiries; subpoenas; or evidentiary privileges, and does not require providers to reidentify deidentified data.

The Minnesota Attorney General enforces this law and may recover investigative costs and attorney fees, but the law does not create a private right of action for consumers.