Minnesota Consumer Data Privacy Act (“MCDPA”)
Information for Consumers •
Information for Businesses •
Frequently Asked Questions •
File a Complaint
Data Privacy Complaint Form
Minnesota law protects consumers’ privacy. You can learn more about your rights under Minnesota law by visiting the Attorney General’s privacy website here. The Attorney General’s Office supports consumers’ privacy rights by investigating and enforcing Minnesota’s laws, including the Minnesota Consumer Data Privacy Act.
You can use this Privacy Complaint Form to report a company for violating Minnesota’s Consumer Data Privacy Act. Some of the things you may wish to report include:
- A company’s failure to respond to your request to know what data the company may be processing about you;
- A company’s failure to correct inaccurate information after you requested a correction;
- A company’s failure to delete your data after you requested deletion;
- A company’s failure to provide your data in a portable or readily-usable format after you have made a request for a copy of your data from the company;
- A company’s failure to comply with your request to opt out of targeted advertising, sale of your data, or profiling using your data;
- A company’s failure to respond to your request seeking further information about the company’s profiling decisions, which include a company using data to make an automated decision that adversely affects you.
- A company’s failure to respond to your objection to the profiling decision. You have the right to be informed of the reason that the profiling of your personal data resulted in the decision. If feasible, you have the right to be informed of what actions you might have taken to secure a different decision, and what actions you might take to secure a different decision in the future.
- A company’s failure to respond to your request to know whether your data has been disclosed to other entities and what other to what third-party companies your data has been disclosed;
- A company’s failure to respect your request for the company to not process sensitive data about you;
- A company’s attempt to manipulate you into providing consent for data collection or otherwise subvert or impair your autonomy and choice over your privacy rights (including providing a deficient privacy notice); and
- A company’s failure to comply with your universal opt-out request.
Not all companies and not all data are subject to the Minnesota Consumer Data Privacy Act in the same way, but you are encouraged to use this form to report possible violations so that the Attorney General may be kept apprised of trends in the marketplace and ensure compliance.
You should not use this form if you would like to make a request to a company for information about your data, or to make a request about your data, unless you have already contacted the company with that request. If you would like to make an initial request to a company about your data, you may use one of this Office’s template letters, which can be found in links here.
Disclaimer: The Attorney General’s Office (“AGO”) is providing this page as a rough guide to explore rights and obligations pursuant to the Act. In many instances, this website simplifies or rewords the provisions of the Act for comprehension and readability. The website is not intended to provide guidance as to how the AGO would enforce the Act. It is not the AGO’s intention to provide any information on this website that would conflict with the Act. The AGO offers this website as a tool for exploring the Act, but nothing on this site should be construed as legal advice for interpreting the Act or how the Act might be enforced.