Law note · Minnesota
Minnesota Consumer Data Privacy Act, Attorney General enforcement
The Minnesota Attorney General may bring a civil action to enforce MCDPA under the general false-advertising and consumer-protection statute, Minn. Stat. § 8.31, with a civil penalty of up to $7,500 per violation plus litigation costs and injunctive relief. MCDPA expressly bars any private right of action, including one brought under § 8.31's own private-attorney-general provision.
A discretionary warning-letter and 30-day cure opportunity existed but has already sunset, expiring January 31, 2026; the Attorney General may now sue directly without first offering a cure window.
What it asks of an app
- Expect MCDPA violations to be enforced exclusively by the Minnesota Attorney General, never by a private plaintiff, including under § 8.31's general private-attorney-general mechanism.
- Do not rely on a warning letter or cure opportunity before an enforcement action. Minnesota's discretionary 30-day cure mechanism expired January 31, 2026.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, automated_outreach
Primary source: official Minnesota statute text, Minn. Stat. Chapter 325M, Office of the Revisor of Statutes