Libbie Canter’s commentary was included in a Cybersecurity Law Report article analyzing Minnesota’s Consumer Data Privacy Act. Libbie provided her insight on actions companies will need to implement to be compliant with the law, specifically around profiling protections and establishing additional policy documentation.
Companies will need planning time to comply with Minnesota's profiling protections and to establish additional policy documentation. “These elements of the law will require work streams that have more significant lag times or would necessitate a significant operational change that requires internal budget,” Libbie said.
She added that Minnesota lets companies use a risk assessment prepared to comply with another legal framework if the scope and goals are reasonably similar. This embrace of harmonization demonstrates that "the Minnesota Legislature wasn't intending to create an idiosyncratic Minnesota-specific" impact assessment, she said.
Click here to read the full article.