{"id":4576,"date":"2023-05-26T08:31:39","date_gmt":"2023-05-26T14:31:39","guid":{"rendered":"https:\/\/trustarc.com\/?post_type=resource&#038;p=4576"},"modified":"2024-10-08T12:14:10","modified_gmt":"2024-10-08T18:14:10","slug":"montana-consumer-data-privacy-act-background","status":"publish","type":"resource","link":"https:\/\/trustarc.com\/resource\/montana-consumer-data-privacy-act-background\/","title":{"rendered":"Background Brief: Montana Consumer Data Privacy Act"},"content":{"rendered":"\t\t<section id=\"block_966282614b4838b6a2f952f41c2827a3\" class=\"resource-intro intro-simple\">\n\t\t\t<div class=\"container\">\n\t\t\t\t\t\t\t\t\t<strong class=\"sub-title block uppercase\">article<\/strong>\n\t\t\t\t\t\t\t\t\t\t<h1>Background Brief: Montana Consumer Data Privacy Act<\/h1>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\n\n\t<section id=\"block_30a4998fe6095b5baeea84a7042138e2\" class=\"columns-content\">\n\t\t<div class=\"container\">\n\t\t\t<div class=\"left\">\n\t\t\t\t\t\t\t<\/div>\n\t\t\t<div class=\"middle\">\n\t\t\t\t<div class=\"content\">\n\t\t\t\t\t<p>Privacy advocates including several politicians (notably <a href=\"https:\/\/web.archive.org\/web\/20140109075415\/http:\/www.forbes.com\/pictures\/fdld45hkh\/daniel-zolnikov-26\/\" target=\"_blank\" rel=\"noopener\">Daniel Zolnikov<\/a>) in Montana have campaigned for many years to introduce a raft of laws designed to shield citizens from intrusive uses of digital technologies [See key dates below].<\/p>\n<p>On May 19, 2023, Montana Governor Greg Gianforte signed the state\u2019s comprehensive data privacy law \u2013 <a href=\"https:\/\/legiscan.com\/MT\/text\/SB384\/id\/2791095\/Montana-2023-SB384-Enrolled.pdf\" target=\"_blank\" rel=\"noopener\">the Montana Consumer Data Privacy Act<\/a> \u2013 which is effective from October 1, 2024.<\/p>\n<p>Montana\u2019s data privacy law includes a provision requiring covered entities to process consumers\u2019 opt-out preference signals via universal opt-out mechanisms by no later than January 1, 2025.<\/p>\n<h2>Key dates: Montana data privacy laws<\/h2>\n<ul>\n<li>May 6, 2013 \u2013 Montana becomes the first state with a <a href=\"https:\/\/leg.mt.gov\/bills\/2013\/billhtml\/HB0603.htm\" target=\"_blank\" rel=\"noopener\">location data law<\/a> requiring a government entity (e.g. police) to get a warrant before they can obtain location information of an electronic device, five years before the U.S. Supreme Court passed a similar judgment.<\/li>\n<li>April 19, 2019 \u2013 Montana citizens gain the right to opt-out from having their <a href=\"https:\/\/leg.mt.gov\/bills\/2019\/billhtml\/HB0267.htm\" target=\"_blank\" rel=\"noopener\">energy meter data<\/a> (which includes their home address) shared or sold by energy utilities.<\/li>\n<li>May 7, 2019 \u2013 Montana becomes one of the first two states (the other is Maryland) to <a href=\"https:\/\/leg.mt.gov\/bills\/2021\/billhtml\/HB0602.htm\" target=\"_blank\" rel=\"noopener\">revise warrant requirements for DNA search results<\/a> with a ruling that government entities must get a warrant before searching DNA databases.<\/li>\n<li>November 8, 2021 \u2013 82.33% of voting citizens in Montana support an <a href=\"https:\/\/leg.mt.gov\/bills\/2021\/billhtml\/SB0203.htm\" target=\"_blank\" rel=\"noopener\">amendment to the state constitution<\/a> to explicitly include electronic data and communications in search and seizure protections, requiring government entities to obtain a warrant first.<\/li>\n<li>February 16, 2023 \u2013 Montana Senator Daniel Zolnikov tables <a href=\"https:\/\/legiscan.com\/MT\/bill\/SB384\/2023\" target=\"_blank\" rel=\"noopener\">Senate Bill 384<\/a> (SB 384) with the title \u201cGenerally revise consumer privacy laws\u201d, aiming to establish a new consumer data privacy act in the state that builds on his previous privacy policy proposals, many of which appear in this timeline. The Senate conducts its first reading of the bill the next day.<\/li>\n<li>March 15, 2023 \u2013 Montana\u2019s House of Representatives conducts the first reading of SB 384 and refers it to a hearing by the committee for Energy, Technology and Federal Relations.<\/li>\n<li>May 11, 2023 \u2013 SB 384 (Montana Consumer Data Privacy Act) is passed in the House and signed by the Speaker.<\/li>\n<li>May 19, 2023 \u2013 SB 384 is passed by senators and signed by the President of the Senate.<\/li>\n<li>May 19, 2023 \u2013 Montana Governor Greg Gianforte signs the <a href=\"https:\/\/legiscan.com\/MT\/text\/SB384\/id\/2791095\/Montana-2023-SB384-Enrolled.pdf\" target=\"_blank\" rel=\"noopener\">Montana Consumer Data Privacy Act<\/a>. Sen Daniel Zolnikov says in an interview published by <a href=\"https:\/\/montanafreepress.org\/2023\/10\/05\/the-tiktok-ban-isnt-montanas-only-new-tech-privacy-law\/\" target=\"_blank\" rel=\"noopener\">Montana Free Press<\/a>: <em>\u201cWe should be in charge of our information, and we should be able to decide who we share it with and who they share it with. And that\u2019s it.\u201d<\/em><\/li>\n<li>June 7, 2023 \u2013 Montana Governor Greg Gianforte signs the state\u2019s <a href=\"https:\/\/leg.mt.gov\/bills\/2023\/billhtml\/SB0351.htm\" target=\"_blank\" rel=\"noopener\">Genetic Information Privacy Act<\/a>, which covers not only DNA but also some forms of self-reported health information, making it the most protective consumer genetic privacy law in the United States. It became effective on October 1, 2023.<\/li>\n<li>June 29, 2023 \u2013 Montana\u2019s Governor signs into law the <a href=\"https:\/\/leg.mt.gov\/bills\/2023\/billhtml\/SB0397.htm\" target=\"_blank\" rel=\"noopener\">Facial Recognition for Government Act<\/a>, which prohibits continuous facial surveillance or facial identification by state and local government agencies. It becomes effective on the same day.<\/li>\n<li>October 1, 2024 \u2013 Montana Consumer Data Privacy Act goes into force.<\/li>\n<li>January 1, 2025 \u2013 effective deadline for entities covered by Montana\u2019s consumer data privacy law to honor consumer\u2019s opt-out preferences transmitted via universal opt-out mechanisms.<\/li>\n<\/ul>\n<h2>Montana Data Privacy Law consumer rights<\/h2>\n<p>The <a href=\"https:\/\/legiscan.com\/MT\/text\/SB384\/id\/2791095\/Montana-2023-SB384-Enrolled.pdf\" target=\"_blank\" rel=\"noopener\">Montana Consumer Data Privacy Act<\/a> defines \u2018consumers\u2019 as <em>\u201can individual who is a resident of this state\u201d<\/em> but it also <strong>excludes citizens of Montana<\/strong> <strong>when<\/strong> they are an <em>\u201cindividual acting in a commercial or employment context or as an employee, owner, director, officer, or contractor of a company, partnership, sole proprietorship, nonprofit, or government agency whose communications or transactions with the controller occur solely within the context of that individual&#8217;s role\u201d<\/em> with the above listed categories of organizations.<\/p>\n<p>Montana\u2019s privacy law defines \u2018personal data\u2019 like most other U.S. state privacy laws as <em>\u201cany information that is linked or reasonably linkable to an identified or identifiable individual\u201d<\/em>, with a caveat: <em>\u201cthe term does not include deidentified data or publicly available information\u201d.<\/em><\/p>\n<p>Under the Act Montana\u2019s citizens gain the following personal data privacy rights:<\/p>\n<ul>\n<li><strong>Right to confirm (right to know)<\/strong> when a controller is processing their personal data.<br \/>\nHowever, controllers are allowed to not honor such requests for confirmation or access to personal data records if the activity <em>\u201cwould require the controller to reveal a trade secret\u201d.<\/em><\/li>\n<li><strong>Right to correct inaccuracies<\/strong> in records of personal data.<br \/>\nExercising this right involves \u201cconsidering the nature of the personal data and the purposes of the processing of the consumer&#8217;s personal data\u201d.<\/li>\n<li><strong>Right to delete<\/strong> records of their personal data held by a controller.<\/li>\n<li><strong>Right to obtain a copy<\/strong> of their personal data previously given to the controller, which must also honor the consumer\u2019s right to portability of this copy of their data record.<br \/>\nControllers must honor such requests <em>\u201cto the extent technically feasible\u201d<\/em>, by providing the copy of the record in a <em>\u201creadily usable format that allows the consumer to transmit the personal data to another controller without hindrance when the processing is carried out by automated means, provided the controller is not required to reveal any trade secret\u201d.<\/em><\/li>\n<li><strong>Right to opt-ou<\/strong>t from having their personal data processed for sale or for the purposes of targeted advertising or profiling.<br \/>\nThe right to opt-out from profiling protects consumers from having their data used as part of \u201csolely automated decisions that produce legal or similarly significant effects concerning the consumer\u201d.<\/li>\n<li><strong>Right to non-discrimination<\/strong> for exercising personal data privacy rights.<br \/>\nDiscrimination is defined as \u201cdenying goods or services, charging different prices or rates for goods or services, or providing a different level of quality of goods or services to the consumer\u201d.<\/li>\n<li><strong>Right not to have sensitive personal information processed<\/strong> if the consumer has not consented for the controller to do so.<br \/>\nIn the case of a known child (an individual under 13 years of age) any personal data relating to a child is defined as sensitive data and controllers must abide by the laws in the <a href=\"\/resource\/coppa-compliance-made-easy-keep-kids-in-mind\/\">Children\u2019s Online Privacy Protection Act 1998 (COPPA)<\/a>.<\/li>\n<\/ul>\n<p>Under the Montana Consumer Data Privacy Act sensitive data is defined as information that reveals a person\u2019s:<\/p>\n<ul>\n<li>Racial or ethnic origin<\/li>\n<li>Religious beliefs<\/li>\n<li>Mental or physical health condition or diagnosis<\/li>\n<li>Sexual orientation (as well as information about a person\u2019s sex life)<\/li>\n<li>Citizenship or immigration status<\/li>\n<li>Genetic or biometric data for the purpose of uniquely identifying an individual<\/li>\n<li>Precise geolocation (<em>\u201cinformation derived from technology that directly identifies the specific location of an individual with precision and accuracy within a radius of 1750 feet\u201d<\/em>).<\/li>\n<\/ul>\n<p>Consumers can exercise their rights under Montana\u2019s privacy law by submitting a request to a controller through a secure and reliable mechanism which allows the controller to verify their identity. A parent or legal guardian of a known child can exercise the child\u2019s rights under the privacy law on their behalf.<\/p>\n<h3>No later than January 1, 2025: Global Privacy Controls must be honored<\/h3>\n<p>Organizations subject to the Montana Consumer Data Privacy Act have until January 1, 2025 \u2013 three months from the effective date of the Act (October 1, 2024) \u2013 to comply with rules relating to Global Privacy Control (GPC) signals.<\/p>\n<p>The Act\u2019s GPC provision allows consumers to designate an authorized agent to act on their behalf and signal opt-outs preventing processing of their personal data for the purposes of targeted advertising, sale or profiling.<\/p>\n<p>The rule states designation of opt-outs to an authorized agent can be \u201cby way of a technology, including but not limited to an internet link or a browser setting, browser extension, or global device setting indicating a customer&#8217;s intent to opt out of such processing.\u201d<\/p>\n\t\t\t\t\t\t\t\t\t<div class=\"question-box-multiple\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"question-box bg-white\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/icon_Framework_Small.svg\" class=\"attachment-full size-full\" alt=\"\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h4>Global Privacy Control: Technical brief<\/h4>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<p>What is GPC? What laws mandate its use?<\/p>\n<a href=\"\/resource\/global-privacy-control-known-user-consent\/\" class=\"cta\">Read more<\/a>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"question-box bg-white\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/icon_Consent_Small.svg\" class=\"attachment-full size-full\" alt=\"\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h4>Cookie Consent Manager<\/h4>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<p>Manage essential processes to achieve cookie compliance with state and international privacy laws.<\/p>\n<a href=\"\/products\/consent-consumer-rights\/cookie-consent-manager\/\" class=\"cta\">Learn more<\/a>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<h2>Which organizations are subject to the Montana Consumer Data Privacy Act?<\/h2>\n<p>Montana\u2019s data privacy law applies to any person or organization that:<\/p>\n<ul>\n<li>Conducts business in Montana; or<\/li>\n<li>Produces products or services that are targeted to residents of Montana;and<\/li>\n<\/ul>\n<p>Controls or processes the personal data of:<\/p>\n<ul>\n<li>50,000 or more consumers, excluding personal data controlled or processed solely for the purpose of completing a payment transaction; or<\/li>\n<li>25,000 or more consumers and derives more than 25% of gross revenue from the sale of personal data.<\/li>\n<\/ul>\n<p>Unlike several other U.S. states\u2019 data privacy laws, Montana\u2019s consumer data privacy law does not have a revenue threshold for organizations to be subject to its obligations.<\/p>\n<h3>Organizations exempt from Montana Data Privacy Law obligations<\/h3>\n<ul>\n<li>Montana government organizations (body, authority, board, bureau, commission, district, or agency, or any political subdivision of Montana);<\/li>\n<li>Nonprofit organizations;<\/li>\n<li>Institutions of higher education;<\/li>\n<li>National securities associations registered under 15 U.S.C. 78o\u20133 of the <a href=\"https:\/\/www.govinfo.gov\/content\/pkg\/COMPS-1885\/pdf\/COMPS-1885.pdf\" target=\"_blank\" rel=\"noopener\">federal Securities Exchange Act<\/a>;<\/li>\n<li>Financial institution or an affiliate already governed by Title 10 V of the <a href=\"\/regulations\/glba\/\">Gramm-Leach-Bliley Act<\/a>; or<\/li>\n<li>Covered entity or business associate as defined in the privacy regulations of the <a href=\"\/resource\/hipaa-compliance-privacy-solutions\/\">Health Insurance Portability and Accountability Act (HIPAA)<\/a>.<\/li>\n<\/ul>\n<h3>Data exempted from Montana Consumer Privacy Law provisions<\/h3>\n<ul>\n<li>Protected health information used in compliance with the privacy regulations of HIPAA;<\/li>\n<li>Personal data used in compliance with the Gramm-Leach-Bliley Act;<\/li>\n<li>Medical\/scientific research data under federal regulations for the protection of human subjects (<a href=\"https:\/\/www.hhs.gov\/ohrp\/regulations-and-policy\/regulations\/45-cfr-46\/index.html\">45 CFR 46<\/a>, <a href=\"https:\/\/www.ecfr.gov\/current\/title-21\/chapter-I\/subchapter-A\/part-50\">21 CFR 50<\/a> and <a href=\"https:\/\/www.ecfr.gov\/current\/title-21\/chapter-I\/subchapter-A\/part-56\">21 CFR 56<\/a>) and patient-identifying information covered by <a href=\"https:\/\/www.govinfo.gov\/content\/pkg\/USCODE-2010-title42\/html\/USCODE-2010-title42-chap6A-subchapIII-A-partD-sec290dd-2.htm\">U.S. Code 42 Section 290dd-2 (Public health and welfare \u2013 Confidentiality of records)<\/a>;<\/li>\n<li>Data and documents created for the purposes of the <a href=\"https:\/\/www.govinfo.gov\/content\/pkg\/USCODE-2011-title42\/html\/USCODE-2011-title42-chap117.htm\">Health Care Quality Improvement Act<\/a>;<\/li>\n<li>Patient safety work products for the purposes of the <a href=\"https:\/\/www.govinfo.gov\/link\/plaw\/109\/public\/41\">Patient Safety and Improvement Act<\/a>;<\/li>\n<li>Consumer credit reporting data covered by the <a href=\"https:\/\/www.consumer.ftc.gov\/sites\/default\/files\/articles\/pdf\/pdf-0111-fair-credit-reporting-act.pdf\">Fair Credit Reporting Act<\/a>;<\/li>\n<li>Personal data used in compliance with the <a href=\"https:\/\/www.govinfo.gov\/app\/details\/USCODE-2011-title18\/USCODE-2011-title18-partI-chap123-sec2721\">Driver\u2019s Privacy Protection Act<\/a>;<\/li>\n<li>Personal data regulated by the <a href=\"https:\/\/ojjdp.ojp.gov\/library\/publications\/guide-family-educational-rights-and-privacy-act\" target=\"_blank\" rel=\"noopener\">Family Educational Rights and Privacy Act<\/a>;<\/li>\n<li>Personal data used in compliance with the <a href=\"https:\/\/www.govinfo.gov\/app\/details\/USCODE-2021-title12\/USCODE-2021-title12-chap23-sec2001\" target=\"_blank\" rel=\"noopener\">Farm Credit Act<\/a>;<\/li>\n<li>Personal data used in relation to price, route or service by an air carrier subject to the <a href=\"https:\/\/www.govinfo.gov\/app\/details\/USCODE-2021-title49\/USCODE-2021-title49-subtitleVII-partA-subpartii-chap417-subchapI-sec41713\" target=\"_blank\" rel=\"noopener\">Airline Deregulation Act<\/a>; or<\/li>\n<li>Data used by controllers and processors that comply with the <a href=\"\/regulations\/coppa\/\">Children\u2019s Online Privacy Protection Act 1998 (COPPA)<\/a> are considered compliant to any obligation to gain parental consent before collecting personal data of children.<\/li>\n<\/ul>\n<h2>Complying with the Montana Consumer Data Privacy Act<\/h2>\n<p>Under Montana\u2019s data privacy law, controllers must:<\/p>\n<ul>\n<li>Limit the collection of personal data to only what is adequate, relevant and reasonably necessary to carry out the purposes disclosed to consumers;<\/li>\n<li>Establish, implement and maintain reasonable security practices to \u201cprotect the confidentiality, integrity, and accessibility of personal data appropriate to the volume and nature of the personal data at issue\u201d;<\/li>\n<li>Provide an effective mechanism for consumers to revoke their consent that is at least as easy to use as the mechanism they used to give consent \u2013 and when a consumer revokes their consent, stop processing their personal data within 45 days of receiving the request;<\/li>\n<li>Gain a consumer\u2019s consent (opt-in) before processing:<br \/>\n\u2013 sensitive personal data; and\/or<br \/>\n\u2013 personal data for the purposes of targeted advertising or sale (including personal data of known young people aged between 13 and 16);<\/li>\n<li>Not process sensitive personal information concerning a child (under age 13) \u2013 unless in compliance with COPPA;<\/li>\n<li>Not discriminate against a consumer for exercising any of their consumer rights;<\/li>\n<li>Respond to a consumer\u2019s request to exercise their rights under the Act within 45 days;<\/li>\n<li>Publish a privacy notice that is reasonably accessible, clear and meaningful;<\/li>\n<li>Conduct and document data protection assessments for processing activities that present heightened risks of harm to consumers.<\/li>\n<\/ul>\n<p>Data processors must follow all instructions from a controller and help them meet their compliance obligations, including:<\/p>\n<ul>\n<li>Responding to consumer rights requests;<\/li>\n<li>Securing data during processing and if there is a security breach of the processor\u2019s system, complying with rules for notifying such breaches;<\/li>\n<li>Entering a binding contract with a controller that governs the processor\u2019s data processing procedures performed on behalf of the controller, (and require any subcontractor to enter a similar contract) including:<br \/>\n\u2013 instructions for processing data;<br \/>\n\u2013 nature and purpose of processing;<br \/>\n\u2013 type of data subject to processing and duration of processing;<br \/>\n\u2013 rights and obligations of both parties;<br \/>\n\u2013 ensuring confidentiality of personal data is complied with by each person processing personal data;<br \/>\n\u2013 at the controller\u2019s direction, deleting or returning all requested personal data at the end of the contract (unless retention of the personal data is required by law);<br \/>\n\u2013 complying with reasonable requests from the controller to provide all information necessary to demonstrate the processor\u2019s compliance with the Act; and<br \/>\n\u2013 cooperating with reasonable compliance assessments by the controller (or designated assessor).<\/li>\n<\/ul>\n<h3>Privacy notice requirements under Montana Data Privacy Law<\/h3>\n<p>A controller\u2019s privacy notice must include:<\/p>\n<ul>\n<li>List of categories of personal data processed by the controller;<\/li>\n<li>List of purpose\/s for processing personal data;<\/li>\n<li>List of categories of personal data that may be shared by the controller with third parties \u2013 and the categories of these third parties;<\/li>\n<li>A mechanism for consumers to contact the controller, such as a link to an active email address;<\/li>\n<li>Information about how consumers can exercise their rights under Montana\u2019s data privacy law, including details of how consumers can appeal a controller\u2019s decision about such a request; and<\/li>\n<li>One or more secure and reliable means for consumers to submit a request to exercise their rights under the Act.<br \/>\nNote: any form or other method for submitting a request must be secure and reliable, it must consider the ways consumers normally interact with the controller, and it must allow the controller to verify a consumer\u2019s identity.<\/li>\n<\/ul>\n<h2>Enforcement of Montana Consumer Data Privacy Act<\/h2>\n<p>The Montana Attorney General has exclusive authority to enforce violations of the Montana Consumer Data Privacy Act. Consumers do not have a private right of action but can report alleged violations to the AG\u2019s office.<\/p>\n<p>Before beginning any action against a controller alleged to have violated the Act, the AG will issue a notice of violation to a controller detailing the activities\/incidents that are not compliant.<\/p>\n<p>Until April 1, 2026, a 60-day cure period applies for alleged violations of the Act. If controllers do not correct violations during this timeframe the AG may begin legal action. After this date, the AG may initiate legal actions for alleged violations immediately.<\/p>\n<p>Note: unlike other U.S. state data privacy laws, the text of the Montana Consumer Data Privacy Act does not mention the cost of fines, nor other penalties.<\/p>\n\t\t\t\t\t\t\t\t\t<div class=\"question-box-multiple\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"question-box bg-white\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/icon_Online-Privacy_Small.svg\" class=\"attachment-full size-full\" alt=\"\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h4>Nymity Research<\/h4>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<p>Stay up to date on hundreds of global privacy laws, regulations, and standards.<\/p>\n<a href=\"\/free-trial\/nymity-research\/\" class=\"cta\">Start today<\/a>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"question-box bg-white\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/icon_Data-Lock_Small.svg\" class=\"attachment-full size-full\" alt=\"\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h4>Automate your compliance program<\/h4>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<p>Use PrivacyCentral to streamline privacy compliance across all relevant jurisdictions.<\/p>\n<a href=\"\/products\/privacy-data-governance\/privacycentral\/\" class=\"cta\">Learn more<\/a>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<div class=\"right sm\">\n\t\t\t\t<div class=\"share-it\">\n\t\t\t\t\t<strong class=\"title block uppercase\">Follow us<\/strong>\n\t\t\t\t\t<div class=\"soc-list\">\n\t\t\t\t\t\t<a href=\"https:\/\/www.linkedin.com\/company\/trustarc\/\" target=\"_blank\"><img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/themes\/trustarc\/assets\/dist\/images\/li-dark.svg\" alt=\"\" \/><\/a>\n\t\t\t\t\t\t<a href=\"\nhttps:\/\/twitter.com\/TrustArc\" target=\"_blank\"><img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/themes\/trustarc\/assets\/dist\/images\/tw-dark.svg\" alt=\"\" \/><\/a>\n\t\t\t\t\t\t<a href=\"javascript:;\" id=\"copy-url\"><img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/themes\/trustarc\/assets\/dist\/images\/link-dark.svg\" alt=\"\" \/><\/a>\n\t\t\t\t\t\t<span class=\"copied\" style=\"display:none;\">Link Copied!<\/span>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<div class=\"key-topics\">\n\t\t\t\t\t\t<strong class=\"title block uppercase\">Key Topics<\/strong>\n\t\t\t\t\t\t<ul>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a href=\"https:\/\/trustarc.com\/topic-resource\/data-privacy\/\" class=\"badge\">Data Privacy<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a href=\"https:\/\/trustarc.com\/topic-resource\/us-consumer-privacy-laws\/\" class=\"badge\">US Consumer Privacy Laws<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"cta-area\">\n\t\t\t\t\t<p>Get the latest resources sent to your inbox<\/p>\n\t\t\t\t\t<a href=\"\/subscription-center\/\" class=\"cta\">Subscribe<\/a>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/section>\n\t","protected":false},"excerpt":{"rendered":"<p>The Montana Consumer Data Privacy Act will give residents opt-out rights from personal data being sold or used for profiling and targeted advertising.<\/p>\n","protected":false},"featured_media":1693,"template":"","topic-resource":[55,114],"type-resource":[6],"class_list":["post-4576","resource","type-resource","status-publish","has-post-thumbnail","hentry","topic-resource-data-privacy","topic-resource-us-consumer-privacy-laws","type-resource-articles"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.4 (Yoast SEO v27.4) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Background Brief: Montana Consumer Data Privacy Act | TrustArc<\/title>\n<meta name=\"description\" content=\"The Montana Consumer Data Privacy Act will give residents opt-out rights from personal data being sold or used for profiling and targeted advertising.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/trustarc.com\/resource\/montana-consumer-data-privacy-act-background\/\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/trustarc.com\\\/resource\\\/montana-consumer-data-privacy-act-background\\\/\",\"url\":\"https:\\\/\\\/trustarc.com\\\/resource\\\/montana-consumer-data-privacy-act-background\\\/\",\"name\":\"Background Brief: Montana Consumer Data Privacy Act | TrustArc\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/trustarc.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/trustarc.com\\\/resource\\\/montana-consumer-data-privacy-act-background\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/trustarc.com\\\/resource\\\/montana-consumer-data-privacy-act-background\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/trustarc.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/res-feat-rect-gray.png\",\"datePublished\":\"2023-05-26T14:31:39+00:00\",\"dateModified\":\"2024-10-08T18:14:10+00:00\",\"description\":\"The Montana Consumer Data Privacy Act will give residents opt-out rights from personal data being sold or used for profiling and targeted advertising.\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/trustarc.com\\\/resource\\\/montana-consumer-data-privacy-act-background\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/trustarc.com\\\/resource\\\/montana-consumer-data-privacy-act-background\\\/#primaryimage\",\"url\":\"https:\\\/\\\/trustarc.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/res-feat-rect-gray.png\",\"contentUrl\":\"https:\\\/\\\/trustarc.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/res-feat-rect-gray.png\",\"width\":610,\"height\":152},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/trustarc.com\\\/#website\",\"url\":\"https:\\\/\\\/trustarc.com\\\/\",\"name\":\"TrustArc\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/trustarc.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Background Brief: Montana Consumer Data Privacy Act | TrustArc","description":"The Montana Consumer Data Privacy Act will give residents opt-out rights from personal data being sold or used for profiling and targeted advertising.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/trustarc.com\/resource\/montana-consumer-data-privacy-act-background\/","twitter_misc":{"Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/trustarc.com\/resource\/montana-consumer-data-privacy-act-background\/","url":"https:\/\/trustarc.com\/resource\/montana-consumer-data-privacy-act-background\/","name":"Background Brief: Montana Consumer Data Privacy Act | TrustArc","isPartOf":{"@id":"https:\/\/trustarc.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/trustarc.com\/resource\/montana-consumer-data-privacy-act-background\/#primaryimage"},"image":{"@id":"https:\/\/trustarc.com\/resource\/montana-consumer-data-privacy-act-background\/#primaryimage"},"thumbnailUrl":"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/res-feat-rect-gray.png","datePublished":"2023-05-26T14:31:39+00:00","dateModified":"2024-10-08T18:14:10+00:00","description":"The Montana Consumer Data Privacy Act will give residents opt-out rights from personal data being sold or used for profiling and targeted advertising.","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/trustarc.com\/resource\/montana-consumer-data-privacy-act-background\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/trustarc.com\/resource\/montana-consumer-data-privacy-act-background\/#primaryimage","url":"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/res-feat-rect-gray.png","contentUrl":"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/res-feat-rect-gray.png","width":610,"height":152},{"@type":"WebSite","@id":"https:\/\/trustarc.com\/#website","url":"https:\/\/trustarc.com\/","name":"TrustArc","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/trustarc.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/resource\/4576","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/resource"}],"about":[{"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/types\/resource"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/media\/1693"}],"wp:attachment":[{"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/media?parent=4576"}],"wp:term":[{"taxonomy":"topic-resource","embeddable":true,"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/topic-resource?post=4576"},{"taxonomy":"type-resource","embeddable":true,"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/type-resource?post=4576"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}