SF5221 would create a new section in Minnesota’s consumer data privacy law governing the collection and use of precise geolocation data. The bill defines precise geolocation data broadly as location information accurate within a 1,750-foot radius and applies to Minnesota residents, with exceptions for certain business and employment contexts. It requires controllers that collect this data to disclose that fact in their privacy notices and to provide a prominent notice to consumers at or before collection.
The bill also limits how businesses may use, retain, and monetize precise geolocation data. Controllers and processors would be prohibited from collecting more location data than is necessary to provide requested goods or services, retaining it longer than needed or longer than one year after the consumer’s last intentional interaction, and selling, trading, or leasing it to third parties. Limited exceptions would allow use of precise geolocation data for security, fraud prevention, harassment response, investigation/prosecution, and certain service-provider functions, but those uses are subject to shorter retention limits and purpose restrictions. The bill creates a private right of action for consumers injured by violations and authorizes damages, punitive damages, injunctive and declaratory relief, and attorney fees.
If enacted, the bill would expand Minnesota Statutes chapter 325M by adding a new geolocation-specific privacy protection regime. It would impose new compliance obligations on data controllers and processors that collect location data from consumers, particularly app developers, online platforms, advertisers, and other businesses that use device-based tracking or location-enabled services. It would also create significant litigation exposure through statutory damages of at least $5,000 per violation, adjusted for inflation, making enforcement potentially costly for covered entities.
The available context shows no committee testimony or recorded votes, so there is no documented public debate in the provided materials. Based on the bill’s structure, the measure appears to reflect a consumer-privacy and data-minimization approach, with an emphasis on transparency and restricting commercial exploitation of sensitive location information. The absence of recorded opposition or support in the provided record means the overall sentiment cannot be measured from hearings or votes, but the bill’s sponsor and drafting suggest a protective posture toward consumer privacy.
The main points of contention likely would be the breadth of the definition of precise geolocation data, the strict retention limits, the ban on sale or transfer, and the high statutory damages available in private lawsuits. Businesses that rely on location analytics, advertising, fraud detection, or service optimization may view the bill as burdensome or overly restrictive, while privacy advocates would likely support the stronger notice and use limitations. The bill’s enforcement mechanism and potential exposure to class-style litigation are likely to be the most significant policy flashpoints.
The bill would add a new geolocation-data privacy section to Minnesota Statutes chapter 325M, imposing notice, use-limitation, retention, and transfer restrictions on controllers and processors that handle precise geolocation data. It would also create a private right of action with statutory damages, punitive damages, injunctive relief, declaratory relief, and attorney fees, thereby increasing legal risk for businesses that collect or share location data.
No committee transcripts or vote records were provided, so there is no direct evidence of legislative debate or vote sentiment in the supplied materials. The bill’s text indicates a consumer-protection orientation focused on limiting location tracking and commercial use of sensitive data, which suggests likely support from privacy advocates and possible concern from business and technology stakeholders affected by the compliance and litigation provisions.
Likely areas of contention include the broad definition of precise geolocation data, the requirement for prominent pre-collection notice, the prohibition on selling or leasing location data, the one-year and 90-day retention limits, and the minimum $5,000-per-violation damages provision. Businesses that rely on location-based services, advertising, analytics, or fraud prevention may argue the bill is too restrictive or costly, while consumer privacy supporters would likely favor the stronger limits and enforcement tools.