MN SF2810

Creates the Minnesota Age-Appropriate Design Code Act requiring businesses that provide online services, products, or features likely to be accessed by children to prioritize children's privacy, safety, and well-being over commercial interests.

Applies to businesses with annual gross revenues exceeding $25 million (adjusted annually), or that annually process personal data of 50,000+ consumers or derive 50%+ of revenues from selling consumer data.

Requires businesses to conduct data protection impact assessments before offering new services to the public, biennially review assessments, and document risks of material detriment to children with mitigation plans.

Prohibits businesses from profiling children by default, collecting unnecessary personal data, using dark patterns to manipulate children, collecting precise geolocation data without necessity, and using personal data in ways materially detrimental to children's health or well-being.

Establishes attorney general enforcement with civil penalties of up to $2,500 per affected child for negligent violations or $7,500 per affected child for intentional violations; effective July 1, 2024, with a one-year compliance deadline for existing services.