Does Minnesota’s data privacy law apply to small businesses? 

Usually not. The Minnesota Consumer Data Privacy Act exempts small businesses as defined by the SBA, unless they sell sensitive data. The Attorney General enforces the law, with penalties up to $7,500 per violation. Cyber insurance can help with breach costs whether or not the law applies.

https://www.ag.state.mn.us/Office/Communications/2025/07/28_MCDPA.asp

By Heather

Heather focuses on small business insurance at Gild Insurance Agency, writing clear, practical guidance that helps business owners understand coverage, manage risk, and protect their businesses.