MN HF1892

Requires businesses conducting business in Minnesota or targeting Minnesota residents to obtain consumer consent before collecting, using, or disclosing personal information.

Mandates businesses notify consumers at or before collection about the categories of personal information collected, sources of collection, purposes for each category, and recipient categories and disclosure purposes.

Prohibits collection of additional personal information categories, use for additional purposes, or disclosure to additional recipients without providing new notice and obtaining fresh consumer consent.

Establishes enforcement authority for the Minnesota Attorney General with available penalties under section 8.31, plus allows consumers to sue for damages, costs, and attorney fees, with civil penalties up to $7,500 per violation and potential injunctive relief.

Takes effect July 31, 2025.