Minnesota’s governor recently signed the Consumer Data Privacy Act, the country’s 18^th comprehensive state privacy law and the sixth to arrive this year. The law introduces at least three novel requirements that promise to be operationally disruptive for companies – including a milestone consumer right to appeal profiling. Last week, Vermont’s governor vetoed a broad data privacy bill and Rhode Island's governor received a milder bill, leaving Minnesota’s mandates as the latest for companies to address. This article dissects the law’s key features in detail and examines its role in the patchwork of privacy laws, with analysis from experts at Covington & Burling, Foley Hoag, Hogan Lovells, McDermott Will & Emery, Perkins Coie and Squire Patton Boggs. See “Privacy and Data Security Regulators Discuss Enforcement Priorities and Collaborative Efforts” (Jun. 12, 2024).