Minnesota SF2940 modifies the Minnesota Consumer Data Privacy Act to classify consumer health data as sensitive data and adds protections for.

Minnesota SF2940 amends the Minnesota Consumer Data Privacy Act to redefine sensitive data to include consumer health data. This bill adds protections for sensitive data, requiring controllers to obtain consumer consent before processing or sharing such data. It also mandates that controllers conduct data privacy and protection assessments, detailing policies and procedures for handling sensitive data. The bill prohibits the sale of sensitive data without consumer consent and outlines requirements for valid authorizations.

Minnesota SF2940 modifies the Minnesota Consumer Data Privacy Act to classify consumer health data as sensitive data and adds protections for.

Minnesota SF2940 amends the Minnesota Consumer Data Privacy Act to redefine sensitive data to include consumer health data. This bill adds protections for sensitive data, requiring controllers to obtain consumer consent before processing or sharing such data. It also mandates that controllers conduct data privacy and protection assessments, detailing policies and procedures for handling sensitive data. The bill prohibits the sale of sensitive data without consumer consent and outlines requirements for valid authorizations.