20% off all courses - Use code NEWYEAR20 at checkout.

Minnesota Consumer Data Privacy Act (MCDPA) Awareness Course

Coming Soon: March 2026 Delivery: 100% online Duration: 35-40 minutes Certificate on Completion
0:00
15,000+ learners across our course collection. Immediate access on launch. 14 day 100% money-back guarantee.

Minnesota has enacted what may be the most forward-looking consumer privacy law in the United States. The Minnesota Consumer Data Privacy Act (MCDPA), taking effect July 31, 2025, is the first US state law to require AI profiling explainability - organisations must explain WHY an automated decision was made.

This course gives your team practical guidance on MCDPA's pioneering requirements. We cover the groundbreaking AI explainability provisions that require organisations to explain profiling decisions and provide paths to different outcomes. We also cover robust consumer rights, sensitive data protections, and Minnesota's serious enforcement approach with a dedicated 4-attorney team.

If your organisation uses AI, machine learning, or automated decision-making that affects Minnesota residents, this course is essential. The cure period sunsets in January 2026, so building robust compliance now is critical. No technical background required - just focused, practical training your team can apply immediately.

Why learn about MCDPA?

  • Understand the first US AI profiling explainability requirement
  • Learn how to explain automated decisions and provide paths to different outcomes
  • Navigate the dedicated 4-attorney enforcement team's expectations
  • Handle consumer data requests correctly within the 45-day timeline
  • Prepare before the cure period sunsets in January 2026

Course features

Minnesota-specific

Focused entirely on MCDPA with Minnesota-specific requirements, including the pioneering AI explainability provisions.

Practical scenarios

Real-world examples showing how MCDPA's AI requirements apply, including profiling explanation scenarios.

Up to date content

Based on the enacted 2024 legislation with all provisions covered ahead of the July 2025 effective date.

Official sources

Built from Minnesota Statutes and official guidance, with references to authoritative documentation.

Learning with us

Course information

Learning outcomes

  • Understand when and how MCDPA applies to your organisation
  • Know the rights Minnesota residents have over their personal data
  • Comply with AI profiling explainability requirements
  • Explain automated decisions and provide paths to different outcomes
  • Handle consumer data requests correctly within required timeframes
  • Understand enforcement and the dedicated enforcement team's approach

Training recommendations

  • All employees who handle customer data should complete this training before the July 2025 effective date.
  • Teams working with AI, machine learning, or automated decision-making require this training urgently.
  • Annual refresher training is recommended, especially as the cure period sunsets in January 2026.

This course is recommended for

Employees who handle customer data at organisations that conduct business in Minnesota or target Minnesota residents. This includes marketing, sales, customer service, HR, IT, compliance teams, and anyone involved in AI systems, automated decision-making, or profiling.

Prerequisites

There are no prerequisites for this course. No legal or technical background is required.

What do I need for this course?

This course is 100% online and delivered through our online learning platform. Organisations can also access this content via their own LMS on request (SCORM format available).

Course content

In this section we introduce the Minnesota Consumer Data Privacy Act and explain why it represents a significant evolution in US privacy law with its groundbreaking AI profiling provisions.

Lessons

  • Introduction to MCDPA
  • Why MCDPA is pioneering AI explainability rights
  • When the law takes effect (July 31, 2025)
  • Who the law applies to
  • Key definitions explained

Minnesota residents have comprehensive rights over their personal data. In this section we cover what those rights are, how to recognise a valid request, and what your obligations are when you receive one.

Lessons

  • The right to confirm and access
  • The right to correct inaccurate data
  • The right to delete personal data
  • The right to data portability
  • The right to opt out of sales and targeted advertising
  • Responding to consumer requests (45-day timeline)

MCDPA introduces groundbreaking requirements around automated decision-making and profiling. Consumers have the right to know WHY a decision was made and how to pursue a different outcome.

Lessons

  • What is profiling under MCDPA?
  • The profiling explainability requirement
  • Explaining the "why" behind automated decisions
  • Providing paths to different outcomes
  • Opt-out rights for profiling
  • Practical AI compliance strategies

MCDPA requires opt-in consent before processing sensitive data. We explain what counts as sensitive data under Minnesota law and the expanded categories.

Lessons

  • What is sensitive data under MCDPA?
  • The opt-in consent requirement
  • Children's data protections
  • Transgender and reproductive health data
  • Practical consent implementation

This section covers the operational requirements of MCDPA including data protection assessments, security obligations, and working with third-party processors.

Lessons

  • Data minimisation and purpose limitation
  • Data protection assessment requirements
  • Security requirements
  • Processor contract requirements
  • Privacy notice obligations

Understand Minnesota's enforcement approach, including the dedicated 4-attorney enforcement team and the cure period structure.

Lessons

  • Attorney General enforcement authority
  • The dedicated 4-attorney enforcement team
  • The cure period (expires January 2026)
  • Civil penalties explained
  • No private right of action
  • Building a compliance programme

Test your knowledge with scenario-based questions covering all the key MCDPA concepts from the course.

Lessons

  • Knowledge check (10 questions)

How it works

Step 1

Get notified

Sign up to be notified when this course launches. You'll be among the first to know and can start training your team immediately.

Step 2

Start learning

Each team member will have access to the learning materials and assessment. On completion of the course, team members will be issued with a certificate.

Step 3

Stay compliant

As MCDPA takes effect and the cure period approaches its sunset, we'll update the course. Trainees can review updated materials to stay current.

What's included

Training

  • Distraction-free online learning platform
  • Scenario-based end of course assessment

Updates

  • Access to all course material updates and enhancements for the length of your access period

Certification

  • Certificate on completion

Course FAQs

Yes, on completion of the course you will be issued with a digital certificate. It will be issued by our team shortly after completion of the course including the end of course assessment. You can add this to your LinkedIn profile.

This course is designed for employees who handle customer data at organisations that may be subject to Minnesota's privacy law. This includes marketing, sales, customer service, HR, IT teams, and especially anyone involved in automated decision-making or AI systems.

The Minnesota Consumer Data Privacy Act takes effect on July 31, 2025. Given the unique AI explainability requirements, organisations should begin preparing now to ensure compliance by the effective date.

MCDPA applies to organisations that conduct business in Minnesota or target Minnesota residents, AND either: (a) control or process personal data of 100,000+ Minnesota consumers, or (b) control or process data of 25,000+ Minnesota consumers and derive over 25% of gross revenue from selling personal data.

MCDPA is the first US state privacy law to require AI profiling explainability - organisations must explain WHY an automated decision was made and provide a path to a different outcome. Minnesota has also established a dedicated 4-attorney enforcement team, and the cure period sunsets in January 2026.

Yes, we offer a 14-day 100% money-back guarantee. If you are not satisfied with the course for any reason, simply contact us within 14 days of purchase for a full refund.

The course typically takes 35-40 minutes to complete. You can pause and resume at any time, and your progress is automatically saved.

Get notified when this course launches

Sign up to our newsletter to be the first to know when this course is available.

This course will be included in Measured Collective Plus

Get access to all our courses with one subscription from £236/year.

Learn About MC Plus

Available courses

PECR & ePrivacy for Marketers

PECR & ePrivacy for Marketers

UK PECR / ePrivacy

Included in PLUS

Learn PECR rules for direct marketing, cookies, and tracking technologies. Built for marketing and sales teams. Certificate on completion.

View Course
Abstract blue cityscape with tall buildings

GDPR Refresher Training Course

UK UK GDPR

Included in PLUS

A 25-minute refresher covering recent enforcement cases, the Data Use and Access Act 2025, and current GDPR best practices. Certificate…

View Course
woman reading book in training room with team members

GDPR Essentials Course

UK UK GDPR

Included in PLUS

Master UK GDPR fundamentals: data protection principles, lawful bases, data subject rights, and compliance essentials. Certificate on completion.

View Course