Minnesota Data Privacy Act modification to make consumer health data a form of sensitive data provision and sensitive data additional protections addition provision

SF 2940 modifies Minnesota's Consumer Data Privacy Act to explicitly classify consumer health data as "sensitive data," requiring stronger protections. This affects Minnesotans whose health information (like diagnoses, treatments, medications, or mental health status) is collected by businesses, and the businesses handling this data. The bill amends specific sections of Minnesota Statutes (325M.11, 325M.12, etc.) to add health data to the list of sensitive data types, mandating additional safeguards for its collection, use, and sharing. These changes align with existing protections for other sensitive data like biometrics under the law. The bill does not introduce new enforcement mechanisms but clarifies that health data requires the same heightened privacy standards as other sensitive categories.