Minnesota 2025 2025-2026 Regular Session

Minnesota Senate Bill SF1240 Introduced / Bill

Filed 02/07/2025

                    1.1	A bill for an act​
1.2 relating to data privacy; establishing neurodata rights; modifying certain crimes​
1.3 to add neurodata elements; providing civil and criminal penalties; amending​
1.4 Minnesota Statutes 2024, sections 13.04, by adding a subdivision; 609.88,​
1.5 subdivision 2; 609.891, subdivision 3; proposing coding for new law in Minnesota​
1.6 Statutes, chapter 325E.​
1.7BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF MINNESOTA:​
1.8 Section 1. Minnesota Statutes 2024, section 13.04, is amended by adding a subdivision​
1.9to read:​
1.10 Subd. 1a.Right to mental data.(a) An individual has the right to mental privacy. A​
1.11government entity must not, without informed consent, collect data transcribed directly​
1.12from brain activity.​
1.13 (b) An individual has the right to cognitive liberty. A government entity must not interfere​
1.14with the free and competent decision making of the individual when making neurotechnology​
1.15decisions.​
1.16 Sec. 2. [325E.85] NEUROTECHNOLOGY .​
1.17 Subdivision 1.Definitions.(a) For purposes of this section, the following terms have​
1.18the meanings given.​
1.19 (b) "Brain-computer interface" means a device that enables its user to interact with a​
1.20computer by means of brain activity only.​
1​Sec. 2.​
25-01189 as introduced​01/14/25 REVISOR VH/VJ​
SENATE​
STATE OF MINNESOTA​
S.F. No. 1240​NINETY-FOURTH SESSION​
(SENATE AUTHORS: LUCERO and Maye Quade)​
OFFICIAL STATUS​D-PG​DATE​
Introduction and first reading​02/10/2025​
Referred to Judiciary and Public Safety​ 2.1 (c) "Consciousness bypass" means the use of neurotechnology to manipulate brain​
2.2activity by applying electrical or optical stimuli without the conscious awareness of the​
2.3person whose brain activity is being manipulated.​
2.4 (d) "Neurotechnology" means the assembly of methods and instruments that enable a​
2.5direct connection of technical components with the nervous system.​
2.6 Subd. 2.Neurotechnology rights.(a) An individual has the right to change one's​
2.7decisions regarding neurotechnology and the right to determine by what means to change​
2.8that decision.​
2.9 (b) An individual has the right to mental integrity and is afforded protection from​
2.10neurotechnological interventions of the mind and from unauthorized access to or manipulation​
2.11of an individual's brain activity.​
2.12 (c) An individual has the right to psychological continuity and is afforded protection​
2.13from unauthorized neurotechnological alterations in mental functions critical to personality.​
2.14 Subd. 3.Data collection consent.Each time an individual connects to a brain-computer​
2.15interface, the company responsible for recording and storing the data must provide notice​
2.16of (1) the uses that the data may be used for by the company, and (2) the third parties with​
2.17which the data will be shared. Before the data may be used or shared, the individual must​
2.18provide consent for each use and third party. The individual must approve each use and​
2.19third party using a separate consent form.​
2.20 Subd. 4.Consciousness bypass prohibition.(a) Except as provided in paragraph (b),​
2.21a company must not use a brain-computer interface to bypass conscious decision making​
2.22by the individual.​
2.23 (b) An individual may provide informed consent before a medical procedure designed​
2.24to bypass conscious decision making. Consent obtained by using a consciousness bypass​
2.25is not informed consent.​
2.26 Subd. 5.Enforcement; civil penalty.A company that violates subdivision 3 or 4 is​
2.27subject to a civil penalty of up to $10,000 per incident. The attorney general may bring an​
2.28action in the name of the state in a court of competent jurisdiction to recover civil penalties​
2.29as provided in this subdivision.​
2.30 Sec. 3. Minnesota Statutes 2024, section 609.88, subdivision 2, is amended to read:​
2.31 Subd. 2.Penalty.Whoever commits computer damage may be sentenced as follows:​
2​Sec. 3.​
25-01189 as introduced​01/14/25 REVISOR VH/VJ​ 3.1 (a) to imprisonment for not more than ten years or to payment of a fine of not more than​
3.2$50,000, or both, if:​
3.3 (1) the damage, destruction, or alteration results in a loss in excess of $2,500, to the​
3.4owner, or the owner's agent, or lessee; or​
3.5 (2) the damage, destruction, or alteration occurs to a computer having a brain-computer​
3.6interface, regardless of the value of the loss;​
3.7 (b) to imprisonment for not more than five years or to payment of a fine of not more​
3.8than $10,000, or both, if the damage, destruction or alteration results in a loss of more than​
3.9$500, but not more than $2,500 to the owner, or the owner's agent or lessee; or​
3.10 (c) in all other cases to imprisonment for not more than 90 days or to payment of a fine​
3.11of not more than $1,000, or both.​
3.12 EFFECTIVE DATE.This section is effective for crimes committed on or after August​
3.131, 2025.​
3.14 Sec. 4. Minnesota Statutes 2024, section 609.891, subdivision 3, is amended to read:​
3.15 Subd. 3.Gross misdemeanor.(a) A person who violates subdivision 1 in a manner that​
3.16creates a risk to public health and safety is guilty of a gross misdemeanor and may be​
3.17sentenced to imprisonment for a term of not more than 364 days or to payment of a fine of​
3.18not more than $3,000, or both.​
3.19 (b) A person who violates subdivision 1 in a manner that compromises the security of​
3.20data that are protected under section 609.52, subdivision 2, paragraph (a), clause (8), or are​
3.21not public data as defined in section 13.02, subdivision 8a, is guilty of a gross misdemeanor​
3.22and may be sentenced under paragraph (a).​
3.23 (c) A person who violates subdivision 1 and gains access to personal data is guilty of a​
3.24gross misdemeanor and may be sentenced under paragraph (a).​
3.25 (d) A person who is convicted of a second or subsequent misdemeanor violation of​
3.26subdivision 1 within five years is guilty of a gross misdemeanor and may be sentenced​
3.27under paragraph (a).​
3.28 (e) A person who violates subdivision 1 by accessing, or attempting to access, an​
3.29electronic terminal through opening, or attempting to open, any panel or access door without​
3.30authorization is guilty of a gross misdemeanor and may be sentenced under paragraph (a).​
3​Sec. 4.​
25-01189 as introduced​01/14/25 REVISOR VH/VJ​ 4.1 (f) A person who violates subdivision 1 and gains access to a system that includes a​
4.2brain-computer interface is guilty of a gross misdemeanor and may be sentenced under​
4.3paragraph (a).​
4.4 EFFECTIVE DATE.This section is effective for crimes committed on or after August​
4.51, 2025.​
4​Sec. 4.​
25-01189 as introduced​01/14/25 REVISOR VH/VJ​