Breaches, location data, surveillance, and who holds what about you.
In Chatrie v. United States, a divided Supreme Court held that pulling a person's location data from Google is a search. Minnesota's Legislature required a warrant for exactly that in 2014 — before Carpenter, and long before this term.
Read →Minn. Stat. § 325E.61, chapter 325M, and chapter 13 use three different definitions, three different triggers, and three different enforcers — and § 13.05, subd. 11 pulls private contractors into the Data Practices Act whether or not the contract says so.
Read →Minnesota's Data Practices Act gives a data subject a ten-business-day response deadline, a written-denial requirement that must cite a statute, and two enforcement tracks. Most people use none of it.
Read →Minn. Stat. § 13.825 classifies body-worn camera data as private or nonpublic and then carves out five exceptions. The retention floor is 90 days — which is the number that decides most cases.
Read →In FCC v. AT&T, the Court upheld the FCC's power to impose forfeiture penalties without a jury. Minnesota's own Consumer Data Privacy Act took effect July 31, 2025 — with real rights, and enforcement reserved exclusively to the Attorney General.
Read →Minn. Stat. § 325E.61 requires notice 'in the most expedient time possible and without unreasonable delay,' plus notice to the national credit bureaus within 48 hours when more than 500 people are notified at one time. Enforcement is the Attorney General's alone — and GLBA financial institutions are exempt outright.
Read →In Cox v. Sony Music, the Court erased a $1 billion verdict and held that an ISP is not liable merely for serving subscribers it knows are infringing. The last time the music industry could not reach the middleman, it sued a mother of four from Brainerd.
Read →Minn. Stat. § 626A.02, subd. 2(d) lets a party to a conversation record it, and § 626A.13 gives the person recorded a civil action worth at least $10,000 when it does not. Section 609.746 governs cameras, contains no one-party rule, and creates no civil remedy at all.
Read →The Minnesota Health Records Act, Minn. Stat. §§ 144.291–144.298, requires signed consent for releases that HIPAA permits outright. Section 144.292 sets a 30-day access deadline and a capped fee schedule; § 144.298 gives the patient a private action against the requester as well as the releaser.
Read →