Montana Consumer Data Privacy Act

A 2025 amendment (SB 297) lowered Montana's thresholds: now applies at 25,000+ Montana consumers (excluding payment-only data, down from 50,000), or 15,000+ if 25%+ of revenue comes from selling personal data (down from 25,000). The same amendment narrowed the nonprofit exemption to insurance-fraud-detection organizations only — most nonprofits are no longer exempt. It also converted the GLBA exemption from entity-level to data-level, replacing the old broad financial-institution carve-out with a narrower entity exemption limited to state/federally chartered banks and credit unions (and their affiliates) — not GLBA-regulated financial institutions generally.