Consumer's consent prior to collecting personal information requirement
Impact
If enacted, SF950 will amend Minnesota Statutes to enforce more stringent controls over personal data collection practices. Businesses will be prohibited from proceeding without consumer consent, which will likely require significant adjustments in their data handling processes. The Attorney General's office will be tasked with enforcing these regulations, and businesses found in violation may face penalties including substantial civil fines and potential lawsuits from consumers who suffer damages due to unauthorized data practices. Thus, the bill aims to bolster data protection while holding businesses accountable for their data management practices.
Summary
Senate File 950 (SF950) is a legislative proposal aimed at enhancing consumer data privacy by requiring explicit consent from individuals before any collection, use, or disclosure of their personal information by businesses operating in Minnesota. The bill outlines the conditions under which consent must be acquired, emphasizing the need for businesses to provide clear information regarding what types of personal information they collect, as well as the purposes of its collection. This is intended to empower consumers and foster a more transparent relationship between them and businesses that handle their data.
Contention
There are points of contention regarding SF950, particularly among businesses that may view the requirements for consent as burdensome. Critics, particularly within the business community, may express concerns that the added regulatory framework could hinder operational efficiency and innovation. Additionally, there may be debates over the practicality of enforcing these consent measures, especially for smaller businesses lacking the resources to implement extensive data management systems. Others may argue that while consumer rights need protection, the bill could inadvertently stifle economic growth if businesses face excessive compliance costs.
Public postsecondary institutions requirement to keep certain student information private establishment; consent requirement before collecting student location data
Minnesota Consumer Data Privacy Act modified to make consumer health data a form of sensitive data, and additional protections added for sensitive data.