Minnesota data privacy & data broker removal
Minnesota has a comprehensive privacy law that gives you the right to access, delete, and control your personal data. Here is how those rights work in practice and how to remove yourself from data brokers.
At a glance
- Comprehensive privacy law? Yes, the Minnesota Consumer Data Privacy Act (MCDPA)
- In effect since July 31, 2025
- Your core rights Access & Know, Correct, Delete, Data Portability +5 more
- Honors Global Privacy Control? Yes
- Data-broker registry? No
- Can you sue? (private right of action) No
- Enforced by Minnesota Attorney General
What Delist can do for you in Minnesota
Minnesota recognizes an authorized agent under the Minnesota Consumer Data Privacy Act (MCDPA). When you authorize Delist, we file opt-out requests as your agent, and a data broker covered by the law is required to act on them once it verifies the request.
Deletion requests are filed on your behalf. Minnesota's law extends agent authority to opt-outs, not to deletion, so a broker may ask you to confirm a deletion directly. We tell you when that happens.
One limit: Minnesota keeps opt-outs of profiling outside the agent right, so we file those on your behalf rather than as your agent.
Basis: Minn. Stat. § 325M; § 325M.14 subd. 2(d). Reviewed September 1, 2026. How the three groups work: our authorized-agent framework.
Your rights in Minnesota
Minnesota residents are protected by the Minnesota Consumer Data Privacy Act (MCDPA).
- Right to Access & Know: Request a copy of the personal information a company holds about you.
- Right to Correct: Request corrections to inaccurate personal information.
- Right to Delete: Ask a company to delete your personal information.
- Right to Data Portability: Get your data in a portable format you can take to another service.
- Right to Opt Out of Sale: Tell a company to stop selling your personal information.
- Right to Opt Out of Targeted Advertising: Stop companies from targeting you with ads based on your personal data.
- Right to Opt Out of Profiling: Stop companies from building a behavioral profile about you.
- Question/contest the result of profiling
- Obtain a list of the specific third parties your data was disclosed to
- Right to Appeal: Challenge a company's decision to deny your privacy request.
Does this cover the company that has my data?
Most companies that collect or sell personal data in Minnesota are likely covered. The law applies to a business if it controls or processes the personal data of 100,000 or more Minnesota consumers, or 25,000 or more consumers while earning over 25% of its gross revenue from selling personal data. Smaller businesses are generally exempt, but they still need your opt-in consent before selling sensitive data.
How to remove yourself from data brokers in Minnesota
Your state law gives you the right to request deletion, but exercising it across every site that holds your data takes real effort. Here are the most effective steps, in order.
1. Enable Global Privacy Control
Global Privacy Control is a free browser setting that automatically tells every website you visit not to sell or share your data. It takes two minutes to enable and works quietly in the background on every site. Minnesota law requires covered businesses to honor it, so this is not just a request. It carries legal weight.
2. Submit direct opt-out requests
For brokers not covered by the registry or GPC, you can submit requests directly. Look for the "Do Not Sell My Personal Information" link in each company's website footer; most major brokers have one. You can also submit formal access, deletion, or correction requests through each company's privacy policy page.
Under Minnesota's law, covered companies must respond within the statutory deadline. If they don't, you have grounds to file a complaint with the Minnesota Attorney General.
3. Automate ongoing removal
A broker may later ingest a new record from public records, data-sharing networks, or commercial databases. Re-listing timing varies by broker and source, so periodic checks matter.
Delist finds where your information is exposed, files the removals for you, and re-runs a full scan every month and re-files when a listing comes back. Start with a free scan to see where you show up.
Run a free scan →Minnesota's data broker law: what it means for you
Minnesota does not have a dedicated data-broker registry. Most national data brokers are registered in California and honor opt-out requests from residents of any state, but without a Minnesota-specific law requiring it, you have little recourse if a broker ignores your request. Delist handles this across many brokers and states in one place.
Other privacy protections in Minnesota
Beyond the comprehensive privacy law, Minnesota has additional protections that may apply to you:
- Address confidentiality: Minnesota's Safe at Home program, run by the Secretary of State, gives survivors of domestic violence, stalking, and others at risk a substitute mailing address to use in place of their real one.
- Biometric data: Minnesota has no standalone biometric-privacy statute you can sue under, but biometric data counts as sensitive data under the MCDPA, so companies need your consent before collecting it.
How to file a privacy complaint in Minnesota
File a complaint with the Minnesota Attorney General at ag.state.mn.us/Office/Complaint.asp.
The Attorney General generally investigates patterns of violations rather than resolving individual disputes. Filing a complaint still matters: it builds the record that helps trigger enforcement.
Frequently asked questions
Does Minnesota have a data privacy law?
Yes. Minnesota residents are protected by the Minnesota Consumer Data Privacy Act (MCDPA), which gives you rights to access, delete, and control your personal data.
Can I sue a company for violating my privacy in Minnesota?
Generally no. The Minnesota Consumer Data Privacy Act has no private right of action, so enforcement runs through the Minnesota Attorney General rather than individual lawsuits.
How do I opt out of data brokers in Minnesota?
Enable Global Privacy Control, submit direct opt-out requests to each broker, and consider a removal service to automate the process. Minnesota has no broker registry.
Does Minnesota require websites to honor Global Privacy Control?
Yes. Minnesota law requires covered businesses to treat Global Privacy Control as a valid opt-out request. Enable it in your browser for automatic protection.
Sources
This page is privacy-rights information, not legal advice. Privacy law changes frequently; verify current rules with your state privacy agency or a licensed attorney before acting. Last verified 2026-06-22. We re-check state privacy laws quarterly.