# Regulatory Standards — Montana MTDPA

## Primary Legislation

### Montana Consumer Data Privacy Act — MCA §30-14-2801 through §30-14-2817

Enacted: May 19, 2023 (SB 384). Effective: October 1, 2024.

- **§30-14-2801**: Definitions
- **§30-14-2803**: Applicability (50,000 consumer threshold — lowest among states)
- **§30-14-2805**: Exemptions (government, GLBA, HIPAA, nonprofits, higher ed, air carriers)
- **§30-14-2806**: Controller duties
- **§30-14-2807**: Processor requirements
- **§30-14-2808**: Consumer rights and universal opt-out
- **§30-14-2810**: Consumer request procedures (45 days, 15-day extension only)
- **§30-14-2812**: Data protection assessments
- **§30-14-2814**: De-identified data
- **§30-14-2816**: Enforcement, 60-day cure period (permanent)
- **§30-14-2817**: Relation to other laws

## Notable Provisions

### Lowest Consumer Threshold
Montana's 50,000 consumer threshold captures smaller businesses that would fall below the 100,000 threshold in most other states. This is particularly significant given Montana's population (approximately 1.1 million), meaning a business reaching about 4.5% of the state population triggers applicability.

### Shorter Extension Period
Montana allows only a 15-day extension (total 60 days) compared to the 45-day extension (total 90 days) available in most other states. This creates tighter operational deadlines.

### Air Carrier Exemption
Montana uniquely exempts air carriers, likely reflecting the importance of air travel in a geographically large, sparsely populated state.

## Related Montana Laws

### Montana Consumer Protection Act — MCA §30-14-103

MTDPA enforcement framework:
- AG investigation and enforcement authority
- Civil penalties
- Injunctive relief
- Consumer restitution

### Montana Data Breach Notification — MCA §30-14-1704

Requires notification to affected individuals following a security breach involving personal information of Montana residents.