What Is the Montana Consumer Data Privacy Act?
The current MTCDPA applies to persons doing business in Montana or producing products or services targeted to Montana residents that meet either the 25,000-consumer branch or the 15,000-consumer-plus-more-than-25%-sale-revenue branch, subject to exceptions. Rights include access, correction, deletion, portability, and opt-outs from targeted advertising, sale, and certain profiling. The Attorney General has exclusive enforcement authority, with a 30-day written notice-and-cure process and civil penalties up to $7,500 per violation.
At a glance
- Full name
- Montana Consumer Data Privacy Act
- Short code
- MTCDPA
- Effective date
- October 1, 2024
- Response reference
- 45 days in this snapshot
- Cure period
- 30 days in this snapshot
- Private right of action
- No
- Enforcement
- Montana Department of Justice. Office of Consumer Protection
- Penalty reference
- Up to $7,500 for each violation under Mont. Code Ann. § 30-14-2820, following the statutory notice-and-cure period
- Statutory citation
- Mont. Code Ann. §§ 30-14-2801–30-14-2820.
Who MTCDPA applies to
A business is covered if it meets the applicability thresholds set out in Mont. Code Ann. §§ 30-14-2801–30-14-2820.. The thresholds listed below are the research record for this law. Whether one or more applies depends on the current statute, its exceptions, and the business's facts; do not assume a universal threshold structure.
- Conducts business in Montana or produces products or services targeted to Montana residents, AND
- Controls or processes personal data of at least 25,000 Montana consumers, excluding data processed solely to complete a payment transaction, OR
- Controls or processes personal data of at least 15,000 Montana consumers AND derives more than 25% of gross revenue from the sale of personal data
Consumer rights under MTCDPA
Access, correct, delete, port, and opt out of targeted advertising, sale, and certain profiling
30-day written enforcement notice-and-cure process
AG exclusive enforcement
Notable features (vs. CCPA)
The 2025 SB 297 amendments took effect October 1, 2025. The current MTCDPA provides access, correction, deletion, portability, and opt-out rights for targeted advertising, personal-data sales, and certain profiling; it also adds separate protections for minors and a written enforcement notice-and-cure process.
Enforcement and penalty reference
Enforcing agency: Montana Department of Justice. Office of Consumer Protection
Penalty reference: Up to $7,500 for each violation under Mont. Code Ann. § 30-14-2820, following the statutory notice-and-cure period
Cure period: Before initiating an enforcement action, the Attorney General must provide written notice identifying the alleged provisions and a 30-day cure period. If the controller cures the noticed violation and provides the required express written statement that the violation has been corrected and will not recur, the statutory enforcement consequences differ; this is not a blanket immunity from every claim.
Private right of action: MTCDPA has no private right of action. The Montana Attorney General has exclusive authority to enforce the part, with consumer complaints handled through the Office of Consumer Protection.
Where to file a complaint: Montana Office of Consumer Protection
How to exercise your MTCDPA rights
- 1
Identify the business that holds your data. OfflistMe can help you review a provider route across 1,034 US/global workflow profiles in the 1,052-record research universe; it does not decide whether a law applies to a specific request.
- 2
Submit a request to the business's designated contact using the provider's current verification instructions. Include only the information reasonably needed to match your record and check the applicable Montana residency, scope, exemption, and verification rules before sending.
- 3
This research snapshot records a 45-day reference window for the modeled request. Confirm the current statute, request type, controller scope, extension rule, and verification date before treating it as a deadline.
- 4
If the provider does not respond or disputes the request, preserve the request and response record, review the applicable exceptions, and consider the Montana Office of Consumer Protection complaint route at https://dojmt.gov/consumer/consumer-complaint-form. A complaint route does not itself guarantee deletion or a particular enforcement result.
Generate requests in under 60 seconds
Generate a MTCDPA privacy request, $9 one-time
FAQ
Do low-population states get less broker coverage?+
Not automatically. A provider may offer a nationwide voluntary request route, but Montana residents do not receive California rights merely because a broker uses a CCPA workflow. Check controller scope, the current provider policy, request verification, and any Montana right that applies.
Official sources & citations
Compare with sibling state laws
MTCDPA is one of 18 comprehensive US state privacy laws. Its closest peers by effective date, useful when tracking how this law influenced or was influenced by neighboring legislation: