MN HF2257

Creates the Minnesota Age-Appropriate Design Code Act requiring businesses that develop online services, products, or features reasonably likely to be accessed by children to prioritize children's privacy, safety, and well-being over commercial interests.

Applies to businesses doing business in Minnesota that meet at least one threshold: annual gross revenues exceeding $25,000,000, annually process personal data of 50,000+ consumers or devices, or derive 50%+ of annual revenues from selling consumer personal data.

Mandates businesses complete data protection impact assessments for new online services, products, or features accessed by children, assessing risks including algorithmic harm, contact exploitation, targeted advertising, dark patterns, and data collection practices.

Prohibits businesses from processing children's unnecessary personal data, profiling children by default without safeguards, collecting precise geolocation by default, and using dark patterns to manipulate children's choices or privacy decisions.

Allows the attorney general to enforce violations through civil penalties of up to $2,500 per affected child for negligent violations or $7,500 per affected child for intentional violations, with a 90-day cure period for substantially compliant businesses; effective July 1, 2025.