Montana Enacts Comprehensive Privacy Legislation

In May, Governor Gianforte signed SB 384 to enact the Consumer Data Privacy Act (CDPA) which takes effect October 1, 2024.

Intended to create a framework for controlling and processing personal consumer data in Montana, the CDPA applies to any person conducting business in the state or who produces products or services targeted to state residents. This also only pertains to entities/individuals:

  • processing personal data of at least 50,000 consumers; or
  • controlling/processing personal data of at least 25,000 consumers and derives 25 percent of gross revenue from the sale of personal data.

Under the CDPA, consumers will be able to access personal data; correct inaccuracies; request data deletion; obtain copies and opt out of the sale of data.

Exempt from the terms of the CDPA is the "collection, maintenance, disclosure, sale, communication, or use of any personal information bearing on a consumer's credit worthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living by a consumer reporting agency, furnisher, or user that provides information for use in a consumer report and by a user of a consumer report, but only to the extent that the activity is regulated by and authorized under the Fair Credit Reporting Act, 15 U.S.C. 1681."

Other exemptions include:

  • Nonprofit organizations
  • Registered securities associations
  • Financial institutions
  • Data governed by the Gramm-Leach-Bliley Act
  • Specific federal laws
  • Covered entities governed by HIPAA

Private rights of action are prohibited by the CDPA; alternatively, the act grants the state attorney general exclusive enforcement authority. The attorney general is required to provide the data controller notice upon discovery of a potential CDPA violation. From that point, the data controller has 60 days to remedy the alleged violation before a suit can be filed.

Posted: June 12, 2023

All Rights Reserved © 2023 Truescreen, Inc.
This document and/or presentation is provided as a service to our customers. Its contents are designed solely for informational purposes, and should not be inferred or understood as legal advice or binding case law, nor shared with any third parties. Persons in need of legal assistance should seek the advice of competent legal counsel. Although care has been taken in preparation of these materials, we cannot guarantee the accuracy, currency or completeness of the information contained within it. Anyone using this information does so at his or her own risk.

Thank you for your interest in Business Information Group. We have received your message and will contact you in one business day or less.
Something went wrong.Try again
You have exceeded the number of attempts to submit this form. As a result, your IP address has been temporarily blocked.
Something went wrong.Try again

Get In Touch

Send a Message *fields required

What are your Interests?optional

Even our RFP PROCESS is state-of-the-art.

Find out why

What Our Clients Are Saying

The service you provide at Truescreen has been the best I have ever seen in comparison to other vendors I have worked with in the past! You guys rock!

Talent Acquisition Specialist
Retail Store Chain

I am very impressed with your company’s customer service, and the Truescreen portal seems to be an intuitive, user-friendly design.

Learning Coordinator
Public College

Our team loves working with Truescreen and the expedient, thorough service and results we get from you.

Human Resources Executive
Large Hotel Chain

I appreciate all your hard work ensuring that individuals are cleared through our processes. Truescreen makes my job so much easier and less stressful.

Human Resources Analyst
Large Academic Institution

You are leaving

Ok, Continue Cancel