Minnesota Consumer Data Privacy Act 325M.16(2)(c): 325M.16 subd. 2(c): data security practices and a data inventory

A controller must establish, implement and maintain reasonable administrative, technical and physical data security practices protecting the confidentiality, integrity and accessibility of personal data, appropriate to the volume and nature of the data, including maintaining an inventory of the data it must manage to meet these responsibilities.