# [Manage privacy requirements of the Montana Consumer Data Privacy Act (MTCDPA)](https://usercentrics.com/us/mtcdpa/) **Montana's privacy law requires covered businesses to give people clear notice, real choice, and reliable ways to opt out without compromising website performance.** With the Usercentrics Consent Management Platform (CMP), you can display a fully customizable cookie banner, support opt-outs for targeted advertising and data sales, and collect opt-in consent for sensitive data — while keeping analytics and advertising working based on real user preferences. [Start free](https://usercentrics.com/us/free-trial/) · [Contact Sales](https://usercentrics.com/us/book-a-consultation/) --- ## What is the MTCDPA? The Montana Consumer Data Privacy Act (MTCDPA) is a comprehensive privacy law that took effect on October 24, 2024. It gives Montana residents more control over how their personal data is collected and used, and it sets clear obligations for covered businesses. Like most U.S. state privacy laws, the MTCDPA uses an opt-out approach for targeted advertising and data sales, but requires opt-in consent for sensitive data. It also adds stronger protections for children and teens. [Common MTCDPA questions and answers](https://usercentrics.com/us/knowledge-hub/montana-consumer-data-privacy-act-mtcdpa/) --- ## MTCDPA at a glance Key Takeaways - The Montana Consumer Data Privacy Act (MTCDPA) took effect October 24, 2024 - Applies to: Businesses doing business in Montana or targeting Montana residents, and meet data-processing (at least 25,000 residents) or revenue (25% of gross revenue and process data of at least 15,000 residents) thresholds - Montana residents have rights of access, correction, deletion, portability, non-discrimination, and opt-out for certain data uses - Must support an opt-out preference signal for data sale or targeted ads - Enforcement: Montana Attorney General - Cure period: 60 days, sunsets April 1, 2026 --- ## What does the MTCDPA require from businesses? To meet MTCDPA requirements, businesses required to comply must provide a clear, up-to-date privacy notice explaining how personal data is collected, used, shared, or sold. They must offer an easy-to-use opt-out mechanism, such as a cookie banner, for the sale of personal data, targeted advertising, and certain profiling. Businesses must also obtain affirmative opt-in consent before processing sensitive personal data and meet additional protection requirements for minors. They are expected to respond to consumer rights requests, maintain reasonable security safeguards, and document data protection assessments for higher-risk processing. --- ## What are the risks of ignoring the MTCDPA? Failing to meet Montana Consumer Data Privacy Act (MTCDPA) requirements can lead to enforcement action by the Montana Attorney General. The 60-day cure period sunsets on April 1, 2026, so businesses no longer have extra time to address issues after notification. Beyond legal exposure, gaps in consent handling, opt-out mechanisms, or required notices can disrupt analytics and advertising workflows, create additional manual work for teams, and weaken customer trust. As more U.S. state privacy laws and updates take effect, inconsistent privacy controls can also lead to costly rework — and increase reputational risk. **How a cookie banner helps your website perform** **Reliable tracking you can trust** Analytics and ads behave predictably based on real user choices. A well-configured cookie banner helps prevent broken tracking, data gaps, and last-minute fixes — your insights stay dependable. **Less work, fewer surprises** Automatic cookie scanning and updates can keep your banner accurate as your site and legal requirements change. Less manual upkeep, fewer headaches, and more time for your team to focus on growth. **A better first impression** A clear, customized cookie banner keeps your visitors informed and gives them clear choices. The result: less friction, more trust, and mitigated legal risk from the start. **Protect revenue as privacy rules change** A flexible cookie banner and consent management platform helps you adapt as privacy expectations and state laws evolve — and as your company grows. You stay in control of tracking and monetization without scrambling to rework setups or risking interruptions. > "Honestly, it was click, click, click, done." > > — Kathryn Fletcher, Web Application Development Manager, Gilson [Read full review](https://usercentrics.com/us/resources/case-study-gilson/) **Prepare your websites and apps for Montana privacy rules** Provide website visitors and app users with clear notice and meaningful choice — while keeping analytics and ads running smoothly. Start your free Usercentrics trial today. Manage legal and operational risk as privacy expectations and rules change. [Start free](https://usercentrics.com/us/free-trial/) --- ## Talk to our privacy experts Usercentrics helps businesses operating in Montana provide visitors with clear notice and meaningful choice — without disrupting website or app performance, analytics, or advertising. Whether you're preparing for MTCDPA requirements or managing multiple U.S. and global privacy laws, our team can help you protect your business and implement the right setup for your website. - Maintain reliable tracking and marketing performance as privacy rules evolve - Automate setup and updates to reduce ongoing maintenance - Address legal and operational risk with a single, scalable platform [Contact sales](https://usercentrics.com/us/book-a-consultation/) --- ## Learn more **Article — Jun 22, 2023** [Montana Consumer Data Privacy Act (MTCDPA): An Overview](https://usercentrics.com/us/knowledge-hub/montana-consumer-data-privacy-act-mtcdpa/) The Montana Consumer Data Privacy Act is the ninth state-level data privacy law passed in the United States, signed into law the same day as Tennessee's. **Article — Feb 7, 2025** [U.S. Data Privacy Laws by State: Rights and Requirements](https://usercentrics.com/us/knowledge-hub/us-data-privacy-laws-by-state/) In 2025 more U.S. state privacy laws came into effect than in any previous year. Three more followed in 2026 and new ones continue to be passed. We compare what U.S. state-level data privacy laws mean for businesses and consumer rights in light of increasing regulation and enforcement. **Article — Jul 10, 2024** [Understanding Global Privacy Control (GPC): What it is and why it matters](https://usercentrics.com/us/knowledge-hub/what-is-global-privacy-control/) The Global Privacy Control is an initiative to give users control over their personal data online and standardize communication of consent preferences. It offers a universal opt-out signal for data privacy preferences and can automate opt-in or out of the use, sale, or sharing of users' data. --- ## Frequently asked questions ### Who does the MTCDPA apply to? The MTCDPA applies to organizations that conduct business in Montana or target Montana residents with goods or services, and that meet one of the following thresholds: - Control or process personal data of at least 25,000 Montana residents in a calendar year, or - Derive at least 25 percent of gross revenue from the sale of personal data and control or process the personal data of at least 15,000 Montana residents. ### What rights do Montana residents have under the MTCDPA? Montana residents' rights under the MTCDPA: - **Right to access:** Consumers can request confirmation of whether a controller processes their personal data and obtain access to that information, subject to certain exceptions. - **Right to correction:** Consumers can request that a controller correct inaccurate personal data or update outdated information they previously provided. - **Right to delete:** Consumers can request deletion of personal data a controller holds about them or collected from them, with some exceptions. - **Right to data portability:** Consumers can obtain a copy of personal data they previously provided to the controller in a readily usable format, subject to certain exceptions. - **Right to non-discrimination:** Controllers may not unlawfully discriminate against consumers, including when they exercise their privacy rights. - **Right to opt out:** Consumers can opt out of the sale of personal data, targeted advertising, or profiling used to make solely automated decisions that produce legal or similarly significant effects concerning them. ### What is the MTCDPA's approach to consent? The MTCDPA generally follows an opt-out model, but requires opt-in consent before processing sensitive personal data (including data belonging to children). It also requires that consent be freely given, specific, informed, and unambiguous, and includes rules designed to prevent consent being obtained through dark patterns. ### What are the timelines for responding to consumer requests? Controllers must respond to verified consumer requests within 45 days, with a possible 45-day extension when reasonably necessary. If a request is denied, consumers must be able to appeal and the controller must respond to appeals within 60 days. ### How does the universal opt-out signal work in Montana? Businesses must allow consumers to opt out of targeted advertising and the sale of personal data through an opt-out preference signal — such as the Global Privacy Control (GPC) — sent with the consumer's consent. This requirement has been in effect since January 1, 2025. Learn more about [Global Privacy Control and Universal Opt-Out Mechanisms](https://usercentrics.com/knowledge-hub/what-is-global-privacy-control/). --- Subscribe to our newsletter Get our monthly newsletter with insightful articles, industry news, and event invites. Subscribe Email address Subscribe By subscribing to the Usercentrics Newsletter, you agree that your data may be used for information related to the products and services offered by Usercentrics. You can revoke your consent by using the unsubscribe link in a newsletter email or by sending your request to unsubscribe@usercentrics.com. [See Privacy Policy](https://usercentrics.com/privacy-policy/) Products [Usercentrics Web CMP](https://usercentrics.com/us/website-consent-management/) [Usercentrics App CMP](https://usercentrics.com/us/in-app-sdk/) [Usercentrics CTV CMP](https://usercentrics.com/us/usercentrics-ctv-cmp/) [Usercentrics Privacy Policy Generator](https://usercentrics.com/us/privacy-policy-generator/) [Server-side Tagging Solution](https://usercentrics.com/us/server-side-tracking-solution/) [Usercentrics Preference Manager](https://usercentrics.com/us/preference-management/) [Audience Unlocker](https://usercentrics.com/us/audience-unlocker/) [Integrations](https://usercentrics.com/us/integrations/) [Web compliance scan](https://usercentrics.com/us/privacy-compliance-scanner/) [App compliance scan](https://usercentrics.com/us/app-data-privacy-audit/) [ROAS calculator](https://usercentrics.com/roas-calculator/) Solutions [Data Privacy Regulatory Compliance](https://usercentrics.com/us/data-privacy-regulatory-compliance/) [Marketing Performance Optimization](https://usercentrics.com/us/marketing-performance-optimization/) [Migration](https://usercentrics.com/us/migration/) [Media & Publishing](https://usercentrics.com/us/media-publishing/) [Retail & Ecommerce](https://usercentrics.com/us/retail-ecommerce/) [Banking, Finance & Insurance](https://usercentrics.com/us/banking-finance-insurance/) [Healthcare & Pharmaceuticals](https://usercentrics.com/us/healthcare-pharmaceuticals/) [Gaming](https://usercentrics.com/us/gaming/) [Education](https://usercentrics.com/us/education/) [Automotive](https://usercentrics.com/us/automotive/) [Travel & Hospitality](https://usercentrics.com/us/travel/) Regulations [CCPA (California)](https://usercentrics.com/us/ccpa/) [GDPR (EU)](https://usercentrics.com/us/gdpr/) [CPRA (California)](https://usercentrics.com/us/cpra) [CPA (Colorado)](https://usercentrics.com/us/cpa/) [DMA (EU)](https://usercentrics.com/us/digital-markets-act-dma/) [FADP (Switzerland)](https://usercentrics.com/us/fadp/) [PIPEDA (Canada)](https://usercentrics.com/us/pipeda/) [TCF v2.3 (IAB)](https://usercentrics.com/us/cmp-for-publishers/) [Google Consent Mode (EU)](https://usercentrics.com/us/usercentrics-cmp-and-google-consent-mode-v2/) [Microsoft UET Consent Mode (EU)](https://usercentrics.com/us/usercentrics-cmp-and-microsoft-consent-mode/) [View all regulations](https://usercentrics.com/us/regulations-and-frameworks/) Resources [Blog](https://usercentrics.com/us/knowledge-hub/) [Whitepapers](https://usercentrics.com/us/whitepapers/) [Checklists](https://usercentrics.com/us/checklists/) [Courses](https://courses.usercentrics.com) [Case studies](https://usercentrics.com/us/case-studies/) [Privacy-Led Marketing](https://usercentrics.com/us/privacy-led-marketing/) [Events](https://usercentrics.com/us/webinar/) [CONSENTED podcast](https://usercentrics.com/us/consented/) [Guides](https://usercentrics.com/us/guides/) [Release notes](https://releases.usercentrics.com/en) [Developer documentation](https://usercentrics.com/docs/) [RFI template](https://usercentrics.com/us/resources/usercentrics-rfi-template/) [Customer directory](https://usercentrics.com/us/usercentrics-customer-directory/) Company [About us](https://usercentrics.com/us/about-us/) [Press](https://usercentrics.com/us/press/) [Our offices](https://usercentrics.com/us/contact/) [Trust center](https://trust.usercentrics.com/) [Careers](https://usercentrics.com/us/career/) [Open positions](https://apply.workable.com/usercentrics/) [Diversity and inclusion](https://usercentrics.com/us/dei/) Support [General support](https://support.usercentrics.com/hc/en-us) [Contact sales](https://usercentrics.com/us/book-a-consultation/) [Technical support](https://support.usercentrics.com/hc/en-us/requests/new) [Billing and account](https://support.usercentrics.com/hc/en-us/categories/12253804608156-Account-and-billing) [Suggest a feature](https://support.usercentrics.com/hc/en-us/requests/new?ticket_form_id=10610312381340) [Partner login](https://partnerportal.usercentrics.com/) [Partner program](https://usercentrics.com/us/partner-program-overview/) [Affiliate program](https://usercentrics.com/us/affiliates/) © Copyright 2026 Usercentrics GmbH [Terms & Conditions](https://usercentrics.com/terms-and-conditions/) [Terms & Conditions USA](https://usercentrics.com/terms-and-conditions-usa/) [Privacy Policy](https://usercentrics.com/us/privacy-policy/) [Legal Notice](https://usercentrics.com/us/legal-notice/) [Legal Documents](https://usercentrics.com/us/legal-documents/) [Do not sell or share my personal information](javascript:ucResolveCmp().then(cmp=>cmp.showFirstLayer())) [Manage Your Preferences](https://app-preference.preference-management.usercentrics.eu/login/d240b988-65ab-4b2e-8134-4b86e597fc34?lng=en) [Data Subject Requests](javascript:void(0)) [Accessibility Statement](https://usercentrics.com/accessibility-statement-wcag-compliance/) English (US) [English](https://usercentrics.com/)[English (US)](https://usercentrics.com/us/)[Deutsch](https://usercentrics.com/de/)[Español](https://usercentrics.com/es/)[Français](https://usercentrics.com/fr/)[Italiano](https://usercentrics.com/it/)[Português](https://usercentrics.com/pt/) new Uc_Dropdown(document.getElementById("dropdown_6a20435765b04"), {"placeholder":"Select","direct_links":false}); Euro (EUR - €) Euro (EUR - €) US Dollar (USD - $) British Pound (GBP - £) Danish krone (DKK - kr.) Norwegian krone (NOK - kr.) Swedish krona (SEK - kr.) Polish złoty (PLN - zl) Swiss franc (CHF - CHF) new Uc_Dropdown(document.getElementById("dropdown_6a20435765ddb"), {"placeholder":"Select","direct_links":false}); [![What is a Google-certified consent management platform and why do you need one?](https://usercentrics.com/us/wp-content/uploads/sites/7/2024/08/CMP_Badge.svg?v=e6751ec6b1d333a1)](https://usercentrics.com/knowledge-hub/google-cmp-partner-program-usercentrics/ "What is a Google-certified consent management platform and why do you need one) [![Usercentrics G2 Reviews](https://usercentrics.com/us/wp-content/uploads/sites/7/2026/06/Five-badges-G2.svg?v=f9126d18efb7d043)](https://www.g2.com/products/usercentrics/reviews "Usercentrics G2 Reviews") [![Secure your ad revenue with the TCF v2.2](https://usercentrics.com/us/wp-content/uploads/sites/7/2024/08/iab-badge.svg?v=10cba6175b6b8696)](https://usercentrics.com/cmp-for-publishers/ "Secure your ad revenue with the TCF v2.2") [![Patent badge](https://usercentrics.com/us/wp-content/uploads/sites/7/2024/08/uc-patented.svg?v=848b60886c9c1555)](https://usercentrics.com/ "Usercentrics") [![BVDW](https://usercentrics.com/us/wp-content/uploads/sites/7/2024/08/bvdw.png)](https://www.bvdw.org/ "BVDW") [![IAPP](https://usercentrics.com/us/wp-content/uploads/sites/7/2024/08/iapp-bronze-member.png)](https://iapp.org/ "IAPP") [![Accessibility for everyone](https://usercentrics.com/us/wp-content/uploads/sites/7/2025/08/WCAG_22_logo.svg?v=a197f4270c40b01a)](https://usercentrics.com/wcag-accessibility/ "Accessibility for everyone") [![Capterra](https://usercentrics.com/wp-content/uploads/img/8_AuGanFPBGefC2G.svg?t=fa1f52ca)](https://www.capterra.com/p/179357/Usercentrics/reviews/ "Capterra") [![Proficert](https://usercentrics.com/us/wp-content/uploads/sites/7/2025/09/ISO_IEC-27001_2022-1-1.png)](https://trust.usercentrics.com/ "Proficert") [![SOC 2 Type 2 Compliant](https://usercentrics.com/us/wp-content/uploads/sites/7/2025/08/SOC-Badge.png)](https://usercentrics.com/press/usercentrics-cookiebot-achieve-soc-type-2-hipaa-compliance/ "SOC 2 Type 2 Compliant") [![HIPAA Compliant](https://usercentrics.com/us/wp-content/uploads/sites/7/2025/08/HIPAA-Badge-1.png)](https://usercentrics.com/press/usercentrics-cookiebot-achieve-soc-type-2-hipaa-compliance/ "HIPAA Compliant")