Montana Data Privacy Act (Children's Privacy Amendments)
Montana Data Privacy Act (Children's Privacy Amendments) in Montana: active, effective October 1, 2025. Applies to Main Provisions: 25K+ consumers OR 15K+ consumers with 25%+ revenue from sales. Children's Amendments: Controllers offering online services to known minors. Age range: Main Provisions:
Key facts
| Jurisdiction | Montana |
|---|---|
| Category | Consumer Privacy |
| Status | active |
| Effective date | October 1, 2025 |
| Age range | Main Provisions: Ages 13-15, Children's Privacy Amendments: Ages 13-17 |
| Applies to | Main Provisions: 25K+ consumers OR 15K+ consumers with 25%+ revenue from sales. Children's Amendments: Controllers offering online services to known minors |
Key requirements
- Duty of reasonable care
- Limits adult-to-minor messaging
- Consent for data sales/sharing
- Privacy impact assessments
Notes
Two separate provisions with different age ranges and thresholds
Frequently asked
What does Montana Data Privacy Act (Children's Privacy Amendments) require?
Duty of reasonable care Limits adult-to-minor messaging Consent for data sales/sharing Privacy impact assessments
Who must comply with Montana Data Privacy Act (Children's Privacy Amendments) in Montana?
Main Provisions: 25K+ consumers OR 15K+ consumers with 25%+ revenue from sales. Children's Amendments: Controllers offering online services to known minors
When does Montana Data Privacy Act (Children's Privacy Amendments) take effect and what is its status?
Effective October 1, 2025. Current status: active. Two separate provisions with different age ranges and thresholds
Related laws
| Law | Jurisdiction | Category | Status | Effective |
|---|---|---|---|---|
| Arkansas Children and Teens' Online Privacy Protection Act (HB 1717) | Arkansas | Consumer Privacy | active | July 1, 2026 |
| California Consumer Privacy Act (CCPA) | California | Consumer Privacy | active | September 2025 |
| California Mental Health Warnings (AB 56) | California | Consumer Privacy | pending | January 1, 2027 |
| Colorado Privacy Act (Minors Amendments) | Colorado | Consumer Privacy | active | October 1, 2025 |
| Connecticut Data Privacy Act (Children's Privacy Amendments) | Connecticut | Consumer Privacy | active | October 1, 2025; Phase 2 July 1, 2026 |
| Delaware Personal Data Privacy Act | Delaware | Consumer Privacy | active | January 1, 2025 |
| Indiana Consumer Data Protection Act | Indiana | Consumer Privacy | active | January 1, 2026 |
| Iowa Consumer Data Protection Act | Iowa | Consumer Privacy | active | January 1, 2025 |
Put it into practice
- Generate the policy: NIST AI RMF policy generator (generatepolicy.com)
- Buy the policy pack: NIST AI RMF Implementation Policy (cyberpolicy.shop)
- Build it yourself: Pillar 06 Companion — The 2026 AI Risk Register (ciso.diy)