Montana Consumer Data Privacy Act
Montana privacy law (MCDPA): consumer rights
Law as of October 28, 2026 Reviewed by Sergio Maldonado Elvira on 29 October 2026
Summary (not the statute text)
Consumers may confirm and access, correct, delete, and port their data, and opt out of targeted advertising, sale and profiling for automated decisions with legal or similarly significant effects. Controllers must answer within 45 days, extendable once by 45 days with notice, and give information free once in any 12 months. A refusal must be appealable; the controller decides an appeal within 60 days and, on denial, points the consumer to the Attorney General.
Key points
Rights to confirm and access, correct, delete, and obtain a portable copy of data the consumer provided.
Section: § 30-14-2808(1)(a) to (d)
Opt out of targeted advertising, sale, and profiling in furtherance of automated decisions with legal or similarly significant effects.
Section: § 30-14-2808(1)(e)
Response within 45 days; one 45-day extension if the consumer is told within the first period.
Section: § 30-14-2808(4)(a)
Free once per consumer in any 12-month period; fee or refusal allowed for manifestly unfounded, excessive, infeasible or repetitive requests.
Section: § 30-14-2808(4)(c)
Opt-out requests need not be authenticated, but may be refused on a documented good-faith belief of fraud.
Section: § 30-14-2808(4)(d)
Appeal decided in writing within 60 days; on denial the controller gives a way to complain to the Attorney General.
Section: § 30-14-2808(5)
A consumer may use an authorized agent, including a browser or device signal, to opt out.
Section: § 30-14-2809(1)
Sources
Compare consumer rights across all states
Related GDPR articles
Related, not equivalent: the GDPR and the state laws differ in scope, terms and exceptions.
Law as of October 28, 2026.
Reviewed by Sergio Maldonado Elvira on 29 October 2026. Prepared from the official sources listed.
Official text of the Montana statute
Reference material, not legal advice.