Montana’s Consumer Data Privacy Act (MCDPA), officially titled An Act Relating to Consumer Data Privacy, is encapsulated within Senate Bill 384. It marks a significant step in the state’s efforts to enhance data privacy protections for Montana residents.
With increasing emphasis on consumer privacy across the U.S., MCDPA empowers individuals by granting them control over their personal data while establishing specific obligations for businesses that process such data.
MCDPA mandates organizations to adhere to obligations such as data minimization, purpose limitation, security measures, non-discrimination, transparency, and consumer consent requirements. Additionally, businesses must conduct data protection assessments and ensure compliance with processor requirements.
The law grants consumers fundamental data rights, including the right to access, confirm, correct, delete, obtain a copy, and opt out of data processing for targeted advertising and data sales.