Skip to main content
Back to Legal

Minnesota Privacy Disclosure

How SIE Data complies with the Minnesota Consumer Data Privacy Act (MCDPA), and how Minnesota residents can use their rights.

Last updated: May 1, 2026
MCDPA — effective July 31, 2025

Quick summary

  • The MNCDPA gives Minnesota residents access, correction, deletion, portability, and opt-out rights.
  • Minnesota uniquely adds a right to question profiling decisions and a right to know the basis for those decisions.
  • Sensitive data, including data on known children, requires opt-in consent.
  • SIE responds to verified requests within forty-five days at no charge.

1. Overview of the law

The Minnesota Consumer Data Privacy Act took effect on July 31, 2025. It applies to businesses that process personal data of at least 100,000 Minnesota residents, or 25,000 residents when revenue or discounts come from selling personal data. The law is enforced by the Minnesota Attorney General. SIE meets the 100,000 resident threshold and applies the MNCDPA in full.

2. Your rights

  • Right of access. Confirm processing and get a copy of your personal data.
  • Right to correct. Fix inaccurate personal data.
  • Right to delete. Have personal data we hold about you erased.
  • Right to portability. Receive your data in a usable format.
  • Right to opt out. Stop targeted advertising, sale of personal data, and certain profiling.
  • Right to question profiling. Ask why an automated profiling decision was made and request a human review.
  • Right to a list of third parties. Get a list of named third parties to which we have disclosed your data.

3. How SIE complies

We honor universal opt-out signals, including Global Privacy Control. We obtain opt-in consent before processing sensitive data, including data revealing race, religion, mental or physical health, sex life or sexual orientation, citizenship, genetic or biometric data for identification, precise geolocation, and any data of a known child. We do not engage in automated decision-making that has legal or similarly significant effects.

4. Authorized agents

Minnesota allows authorized agents for opt-out requests. The agent should provide written authorization signed by you. We may verify the request directly with you before acting on it.

5. How to submit a request

Or email [email protected] with the subject line "Minnesota MCDPA Request".We respond within forty-five days.

6. Effective date and scope

The MNCDPA took effect on July 31, 2025. The law covers Minnesota residents acting in a personal or household context. Personal data processed in a B2B or employment context is out of scope.

Need help?

Privacy team: [email protected]
See also our Privacy Policy.