Minnesota Statutes Trade Regulations, Consumer Protection (Ch. 324-341) § 325M.04. When disclosure of personal information permitted; authorization

Subdivision 1. Conditions of disclosure. An Internet service provider may disclose personally identifiable information concerning a consumer to:

Subd. 2. Authorization. The Internet service provider may obtain the consumer's authorization of the disclosure of personally identifiable information in writing or by electronic means. The request for authorization must reasonably describe the types of persons to whom personally identifiable information may be disclosed and the anticipated uses of the information. In order for an authorization to be effective, a contract between an Internet service provider and the consumer must state either that the authorization will be obtained by an affirmative act of the consumer or that failure of the consumer to object after the request has been made constitutes authorization of disclosure. The provision in the contract must be conspicuous. Authorization may be obtained in a manner consistent with self-regulating guidelines issued by representatives of the Internet service provider or online industries, or in any other manner reasonably designed to comply with this subdivision.