Law note · Montana
Montana Consumer Data Privacy Act (MCDPA), general applicability and controller/processor duties
MCDPA governs private-sector processing of Montana consumers' personal data. Originally enacted as H.B. 351 (2023 session), 2023 Mont. Laws ch. 681, effective October 1, 2024. Substantially amended by S.B. 297 (2025 session), 2025 Mont. Laws ch. 567, signed May 8, 2025, effective October 1, 2025, which lowered applicability thresholds, added minors' privacy provisions, and added privacy-notice content requirements.
General applicability is set at section 30-14-2803, controller duties at section 30-14-2811 and processor duties at section 30-14-2813.
What it asks of an app
- Confirm you meet MCDPA's applicability thresholds under the current, S.B. 297-amended text rather than the original 2023 thresholds; the 2025 amendment lowered them.
- Apply MCDPA's minors' privacy provisions, added by S.B. 297, to any known child's personal data you process for a Montana consumer.
When LexLint raises it
Declared activities: automated_outreach, crawls_web, deploys_chatbot, processes_biometrics, processes_voice, trains_models
Primary source: official Montana statute text, Mont. Code Ann. Title 30, Chapter 14, Part 28