The road to 50 states: Minnesota and Vermont join the US privacy landscape
The Minnesota Consumer Privacy Act (MCPA) was recently approved by the Governor and will become effective on July 31, 2025. Just behind it, the Vermont Data Privacy Act (VDPA) ended in a veto by the Governor.
Like various other privacy legislations in the US, the MCPA introduces requirements governing the processing of personal data, and establishes consumer data rights. Nonetheless, the new state law is set apart by introducing novel provisions such as Minnesota's right to question the result of a profiling decision and Vermont's private right of action against data brokers.
In this webinar, OneTrust DataGuidance and expert contributors unpack the MCPA and VDPA, examining the requirements, exceptions, and practical implications of the legislations on the data controllers and processors.
Key takeaways:
- Overview of the MCPA and VDPA, including their similarities and differences to established US privacy laws
- New requirements and best practices for reaching compliance
- Key challenges and recommendations on how to prepare for the entry into effect