Minnesota Data Breach Notification Law

Requires businesses to notify Minnesota residents whose unencrypted personal information (name plus SSN, driver's license or state ID number, or financial account or card number with its access code) was, or is reasonably believed to have been, acquired by an unauthorized person, in the most expedient time possible and without unreasonable delay. Service providers must notify the data owner immediately, and breaches affecting more than 500 people require notice to the nationwide consumer reporting agencies within 48 hours.