Montana Consumer Data Privacy Act (MCDPA)
A practical compliance guide for website owners. Learn what Montana's privacy law requires and how to implement it on your site.
Who Must Comply
Conducts business in Montana or targets Montana residents AND controls/processes personal data of 50K+ consumers (lower threshold due to smaller population)
What Your Website Must Do
| Requirement | Status |
|---|---|
| Cookie consent banner | Recommended |
| Do Not Sell link | Required |
| Do Not Share link | Required |
| Honor GPC browser signals | Required |
| Universal opt-out mechanism | Not required |
| Sensitive data opt-in consent | Required |
Required Links & Notices
The MCDPA requires the following links or notices to be visible on your website:
- 1Do Not Sell My Personal Data
- 2Privacy Policy
Enforcement & Penalties
Key Things to Know
Montana has one of the lower consumer thresholds (50,000 consumers) due to its smaller population, making it applicable to more businesses than states with 100,000 thresholds. The law requires honoring universal opt-out mechanisms including GPC.
Important: Montana's 50K threshold means businesses with relatively modest Montana user bases may be covered. If you have a nationally-available website, you may meet this threshold.
How to Configure LegalBanner for MCDPA
- 1
Create your site
Sign up for free and add your website domain in the dashboard.
- 2
Set consent mode to "Opt-out"
In Settings, select the consent mode that matches Montana's requirements.
- 3
Install the snippet
Add the one-line script tag to your website. The banner, opt-out links, and GPC support are automatic.
- 4
Generate your Privacy Policy
Use the built-in policy wizard to generate a MCDPA-compliant privacy policy.
Set up MCDPA compliance in 5 minutes
LegalBanner handles Montana privacy requirements automatically — cookie banner, opt-out links, and GPC support included.
Frequently Asked Questions
Why does Montana have a lower threshold than other states?
Montana has about 1.1 million residents, much smaller than states like California or Texas. The 50,000 consumer threshold is proportionally equivalent to other states' 100,000 thresholds, ensuring the law covers a meaningful portion of businesses.
Does Montana require honoring GPC signals?
Yes. The MCDPA requires businesses to recognize and honor universal opt-out mechanisms, including Global Privacy Control (GPC) browser signals.
Does Montana require a cookie consent banner?
The MCDPA does not require opt-in cookie consent. You must provide clear opt-out mechanisms for targeted advertising and sale of personal data.
What are the penalties for MCDPA violations?
Up to $7,500 per violation. The Montana AG must provide a 60-day cure period before enforcement.
When did the Montana privacy law take effect?
The Montana Consumer Data Privacy Act took effect October 1, 2024. Businesses should already be in compliance.