MN HF67

Requires businesses conducting business in Minnesota or targeting Minnesota residents to obtain explicit consumer consent before collecting, using, or disclosing personal information.

Mandates businesses notify consumers at or before collection of the categories of personal information collected, sources of collection, purposes for collection, and categories of recipients and disclosure purposes.

Prohibits businesses from collecting additional categories of personal information, using information for new purposes, or making additional disclosures without providing updated notice and obtaining fresh consumer consent.

Establishes enforcement through the attorney general with civil penalties up to $7,500 per violation, plus allows recovery of litigation expenses, and provides private right of action for consumers to recover damages plus attorney fees.

Takes effect July 31, 2023.