In May, Montana’s Legislature introduced the broadest state privacy law amendment enacted this year. It is the first state to impose its requirements for protecting minors on all companies, regardless of size, and the fourth state to apply its privacy law to regulated financial companies. State officials made multiple changes that signal seriousness about enforcing the privacy law, including hiking penalties and boosting multiple requirements to the strictest standard among states. Enforcement starts this October. This article discusses the amendment’s top impacts, highlights open questions, and provides practical analysis and concrete considerations for companies, with insights from experts at BakerHostetler, Ballard Spahr; Bass, Berry & Sims; Business Software Alliance; and Miller Nash. See “Connecticut AG’s Report Reveals Privacy Enforcers Reaching Deeper Into Their State Laws” (Apr. 30, 2025).