Provide statutory consumer rights under Section 325O.04 including MINNESOTA-UNIQUE rights. (1) Right to confirm processing + access + portable format; (2) Right to correct inaccuracies; (3) Right to delete; (4) **MINNESOTA-UNIQUE** Right to obtain a list of specific third parties to whom personal data has been disclosed (or categories where specifics impossible) - this third-party disclosure list right is unique among US state privacy laws; (5) Right to opt out of (a) sale (b) targeted advertising (c) profiling in furtherance of decisions producing legal or similarly significant effects; (6) Right to appeal denied requests with AG complaint referral; (7) **MINNESOTA-UNIQUE Right to Question Profiling Decisions** - if profiling produces legal or similarly significant effects consumer has right to (a) meaningful explanation of decision + general factors and contributions to outcome; (b) review personal data used in profiling; (c) correct personal data used in profiling; (d) request retaking of profiling decision without using disputed data (analog of EU GDPR Article 22 but more expansive than other US state laws). Response within 45 days extendable once + free of charge first request per 12-month period + authentication of identity without new account creation + authorised agent permitted including Global Privacy Control. Appeal process within reasonable time + notice of denial reason + AG complaint referral.
This control maps to 30 controls across 23 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 30 it maps to, and the evidence behind each claim, over MCP and REST.