Minnesota Consumer Data Privacy Act, responsibilities of controllers (sensitive data consent) (Minn. Stat. 325M.16(d))
Sensitive data needs the consumer's opt-in consent; even small businesses otherwise exempt may not sell sensitive data without prior consent.
Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text
In the source's own words
“a controller may not process sensitive data concerning a consumer without obtaining the consumer's consent”
Where it was read
Also read from the same source
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide