The Minnesota Consumer Privacy Act (MCPA) was recently approved by the Governor and will become effective on July 31, 2025. Just behind it, the Vermont Data Privacy Act (VDPA) is close to passage as it awaits the Governor's signature.

Like various other privacy legislations in the US, the MCPA and the VDPA introduce requirements governing the processing of personal data, and establish consumer data rights. Nonetheless, both laws set themselves apart by introducing novel provisions such as Minnesota's right to question the result of a profiling decision and Vermont's private right of action against data brokers.

Join Greg Leighton, Privacy & Incident Response Vice Chair, OneTrust DataGuidance and expert contributors, as they unpack the MCPA and VDPA, and discuss the requirements, exceptions, and practical implications of the legislations on the data controllers and processors.

Key takeaways:

• Overview of the MCPA and VDPA, including their similarities and differences to established US privacy laws
• New requirements and best practices for reaching compliance
• Key challenges and recommendations on how to prepare for the entry into effect