HF2700 (Legislative Session 94 (2025-2026))
Minnesota Consumer Data Privacy Act modified to make consumer health data a form of sensitive data, and additional protections added for sensitive data.
Related bill: SF2940
AI Generated Summary
Purpose of the Bill
This legislative bill aims to amend the Minnesota Consumer Data Privacy Act by adding new protections for consumer health data and classifying it as sensitive data. It gives consumers more control over how their sensitive data is used, sold, or processed.
Main Provisions
- Sensitive Data Definition: The bill expands the definition of sensitive data to include consumer health data, biometric data, and genetic information.
- Consent Requirements: Organizations must obtain explicit consent from consumers to process or share sensitive data. Consent for selling sensitive data must be separate and include specific disclosures.
- Data Privacy Policies: Controllers must document data privacy policies, conduct privacy and protection assessments, and ensure security practices are in place.
- Geofencing Restrictions: Prohibits the use of geofences to track, collect data from, or send ads to consumers at in-person health care locations.
Significant Changes to Existing Law
- Introduces new legal requirements for businesses that handle sensitive data, including obtaining explicit consent before selling or processing such data.
- Establishes rules that prevent the use of geofencing technology to collect information from or target individuals seeking health care services.
Enforcement
- The Minnesota Attorney General is authorized to enforce these requirements and can issue warning letters for violations before pursuing legal action. The bill includes penalties of up to $7,500 per violation, but it does not create a private right of action (i.e., individuals cannot personally sue for violations).
Relevant Terms
- Consumer Data Privacy
- Sensitive Data
- Health Data
- Consent
- Biometric Data
- Geofencing
- Privacy Policy
Bill text versions
- Introduction PDF file
Actions
Date | Chamber | Where | Type | Name | Committee Name |
---|---|---|---|---|---|
March 23, 2025 | House | Floor | Action | Introduction and first reading, referred to | Judiciary Finance and Civil Law |
March 23, 2025 | House | Floor | Action | Introduction and first reading, referred to | Judiciary Finance and Civil Law |
Citations
[ { "analysis": { "added": [ "Modifications related to the processing of health data." ], "removed": [], "summary": "This section cites the definition of 'Genetic information' as it is utilized in the text.", "modified": [] }, "citation": "13.386", "subdivision": "subdivision 1" }, { "analysis": { "added": [ "Clarified exclusions related to health records." ], "removed": [], "summary": "This section defines 'health records' and is referenced in the exclusions section of the bill.", "modified": [] }, "citation": "144.291", "subdivision": "subdivision 2" }, { "analysis": { "added": [ "Applied exclusions for government entities." ], "removed": [], "summary": "This section provides the definition of a 'government entity', which is used in exclusions.", "modified": [] }, "citation": "13.02", "subdivision": "subdivision 7a" }, { "analysis": { "added": [ "Clarifies exclusions for nonbank financial institutions." ], "removed": [], "summary": "This section defines a 'nonbank financial institution'.", "modified": [] }, "citation": "46A.01", "subdivision": "subdivision 12" }, { "analysis": { "added": [ "Refers to exclusions for information handled by mortgage originators." ], "removed": [], "summary": "Section defines 'licensed residential mortgage originator'.", "modified": [] }, "citation": "58.02", "subdivision": "subdivision 19" }, { "analysis": { "added": [ "References to exclusions for mortgage servicers." ], "removed": [], "summary": "Section defines 'residential mortgage servicer'.", "modified": [] }, "citation": "58.02", "subdivision": "subdivision 20" }, { "analysis": { "added": [ "Exclusions for personal data regulated entities." ], "removed": [], "summary": "This section defines an 'insurance company'.", "modified": [] }, "citation": "60A.02", "subdivision": "subdivision 4" }, { "analysis": { "added": [ "Outlines exclusions for insurance producers." ], "removed": [], "summary": "Section defines 'insurance producer'.", "modified": [] }, "citation": "60K.31", "subdivision": "subdivision 6" }, { "analysis": { "added": [ "Exclusions for entities compliant with this Act." ], "removed": [], "summary": "This section refers to the Minnesota Insurance Fair Information Reporting Act.", "modified": [] }, "citation": "72A.49 to 72A.505", "subdivision": "" }, { "analysis": { "added": [ "Incorporates definitions applied in data privacy contexts." ], "removed": [], "summary": "This section provides the definition for a 'trade secret'.", "modified": [] }, "citation": "325C.01", "subdivision": "subdivision 5" } ]