Montana Consumer Data Privacy Act
MCDPA · Normalized Research Card v2.1
IN FORCELAST VERIFIED · AUG 26 2026At a glance
Who must comply?
Applicability model: Reduced numerical thresholds after 2025 amendments.
Core threshold: 25,000 consumers; or 15,000 consumers and >25% gross revenue from sale
Applicability remains subject to statutory entity, data-level and activity-specific exemptions. Employment/B2B treatment and federal-law carve-outs should be read together with the official statute linked below.
Consumer rights
| Right / protection | Status |
|---|---|
| Access | ✓ Included / qualified by statute |
| Correction | ✓ Included / qualified by statute |
| Deletion | ✓ Included / qualified by statute |
| Portability | ✓ Included / qualified by statute |
| Opt-out sale | ✓ Included / qualified by statute |
| Opt-out targeted advertising | ✓ Included / qualified by statute |
| Opt-out profiling | ✓ Included / qualified by statute |
| Appeal | ✓ Included / qualified by statute |
Sensitive data & minors
Sensitive-data standard: Consent-based protections
Separate duties of care and data-protection-assessment provisions apply to online services involving minors.
Business obligations
Data minimization, security, easy consent revocation, processor duties and data protection assessments for heightened-risk processing.
Enforcement
Authority: Montana Attorney General
Private right of action: No
Penalty / remedy baseline: Civil penalties available under current code
What makes Montana different?
Montana demonstrates why amendment tracking is essential: its applicability thresholds were materially lowered in 2025 and the statute now contains dedicated minors provisions.
Developments to watch
2025 amendments changed core scope and added minors-focused sections. The current code, not the original 2023 text, should be used.
Editorial rule: future-effective, proposed and pending measures are kept separate from current law.
Primary sources & verification
Last verified: August 26, 2026
Research standard: primary official sources prioritized; official guidance used to explain operational requirements.