MN SF3289: 2025 Regular Session bill
Minnesota SF3289 introduces comprehensive data privacy regulations similar to California's CCPA/CPRA, including opt-out rights, data minimization, and risk assessments for automated decision-making.
Aforeworn detected this change in the US State Data-Privacy Laws space on July 27, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated High urgency. Multistate retailers, adtech/data brokers, SaaS platforms, privacy consultants operating in or serving Minnesota residents. should confirm how it applies to their specific situation before acting. There is a time constraint attached: Effective date likely January 1, 2026 (if passed); immediate preparation recommended.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors US State Data-Privacy Laws continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
New bill proposes consumer rights to opt out of data sales and targeted advertising, mandates universal opt-out signals (e.g., GPC), restricts sensitive data processing, requires data minimization, and imposes risk assessments for ADMT.
Who it affects
Multistate retailers, adtech/data brokers, SaaS platforms, privacy consultants operating in or serving Minnesota residents.
What you must do
Review and update privacy policies, implement opt-out mechanisms (including GPC support), conduct data mapping and risk assessments, and ensure compliance with data minimization principles.
Deadline
Effective date likely January 1, 2026 (if passed); immediate preparation recommended.
Source: https://www.revisor.mn.gov/bills/
Never miss a change like this again
Aforeworn watches US State Data-Privacy Laws around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in US State Data-Privacy Laws
- New Jersey Bans Surveillance Pricing Before It Takes Hold - PaymentsJournal
- Compliance Guidance for the New Vermont Data Privacy and Online Surveillance Act (VDPOSA) - Vermont Becomes the 23rd US State to Enact a Consumer Privacy Law - JD Supra
- Business Compliance Guidance for the New Vermont Data Privacy and Online Surveillance Act (VDPOSA) - Hinshaw & Culbertson LLP
- Article | New Jersey implements nation’s highest data broker fee - POLITICO Pro
- Another State Approves Ban on AI-Powered Surveillance Pricing - inc.com