Introduction to Montana Privacy Rights
Montana has developed a distinctive approach to privacy protection that reflects both the state's independent spirit and its commitment to individual rights. While Montana does not have a comprehensive consumer privacy law comparable to California's Consumer Privacy Act or Virginia's Consumer Data Protection Act, the state has established robust protections through constitutional provisions, sector-specific statutes, and common law principles that together create a meaningful framework for privacy rights.
The Montana Constitution provides one of the strongest foundations for privacy rights in the nation. Article II, Section 10 explicitly guarantees that "the right of individual privacy is essential to the well-being of a free society and shall not be infringed without the showing of a compelling state interest." This constitutional protection, adopted in 1972, predates most state privacy statutes and has been interpreted by Montana courts to provide broader protections than the federal constitution's implied right to privacy.
Montana's privacy landscape includes specific statutory protections for data breach notification, employment privacy, financial information, and telecommunications privacy. The state has been progressive in areas such as employee monitoring restrictions and genetic information protection, but lacks the comprehensive consumer data privacy frameworks that some states have recently adopted. Montana residents must therefore rely on a combination of state-specific laws, federal regulations like HIPAA and FCRA, and the state's constitutional privacy guarantee to protect their personal information.
Compared to other states, Montana occupies a middle ground in privacy protection. It provides stronger employee privacy rights than many states and has a robust constitutional foundation, but has not yet enacted omnibus consumer privacy legislation. This creates a patchwork where certain types of information receive strong protection while other areas rely primarily on federal standards.
Montana's State Privacy Laws
Montana has enacted several important privacy statutes that address specific sectors and types of personal information. Understanding these laws helps Montana residents know what protections they can invoke and what obligations organizations handling their data must follow.
Data Breach Notification Law
Montana's data breach notification statute is codified in the Montana Code Annotated (MCA) § 30-14-1704. This law requires any person or business that conducts business in Montana and owns or licenses computerized data containing personal information to disclose any breach of the security of the data system following discovery or notification of the breach. Personal information is defined as a Montana resident's first name or initial and last name combined with one or more of the following: Social Security number, driver's license or state identification number, account number combined with security code or password, or health information.
The statute requires notification "without unreasonable delay" and mandates that affected individuals be notified by written notice, electronic notice if consistent with E-SIGN Act provisions, or substitute notice if the cost of providing notice exceeds $250,000 or if affected individuals exceed 500,000. The law also requires notification to the Montana Attorney General if the breach affects more than 1,000 Montana residents. Importantly, Montana law does not provide a safe harbor for encrypted data—even encrypted information breaches must be reported if there's a reasonable likelihood of harm.
Employee Privacy Rights
Montana provides exceptionally strong employee privacy protections under several statutes. MCA § 39-2-304 specifically prohibits employers from requiring employees or applicants to provide passwords or access to personal social media accounts. Montana law also restricts workplace monitoring: MCA § 39-2-302 requires employers to notify employees of any electronic monitoring of communications in the workplace, making Montana one of the few states with such explicit requirements.
The Montana Wrongful Discharge from Employment Act (MCA § 39-2-901 et seq.) provides additional privacy protections by limiting at-will employment and requiring good cause for termination, which has been interpreted to include protections for lawful off-duty conduct. Additionally, MCA § 39-2-313 prohibits discrimination based on legal use of lawful products when not at work, protecting employees who engage in lawful activities during non-working hours.
Financial Privacy Protections
Montana follows federal financial privacy requirements under the Gramm-Leach-Bliley Act but adds state-specific protections through insurance information privacy provisions in MCA § 33-19-101 et seq. These statutes regulate how insurance companies collect, use, and disclose personal financial and medical information. Montana requires insurance institutions to provide privacy notices and restricts disclosure of personal information without explicit authorization, with exceptions for necessary business purposes.
Genetic Information Privacy
Montana enacted genetic information privacy protections in MCA § 33-18-206, which prohibits insurers from using genetic information to deny coverage or establish premium rates. This law preceded similar federal protections and demonstrates Montana's proactive approach to emerging privacy concerns. The statute also restricts genetic testing requirements and limits disclosure of genetic test results.
Telecommunications Privacy
MCA § 45-8-213 addresses unlawful interception of communications, providing criminal penalties for unauthorized recording or interception of phone calls, electronic communications, or other private communications. Montana is a "one-party consent" state, meaning that recording a conversation is legal if at least one party to the conversation consents, but this statute provides additional privacy protections beyond federal wiretap laws.
Freedom of Information / Open Records in Montana
Montana's public records law is formally known as the Montana Public Records Act, but more commonly referred to as Montana's Right to Know laws, codified primarily in MCA § 2-6-1001 et seq. This statute establishes that all public writings made, maintained, or kept by the state in the course of its transaction of public business are presumptively open to public inspection.
Scope and Coverage
The Montana Public Records Act defines "public writings" broadly to include all written or recorded information prepared, owned, used, or retained by a public agency regardless of physical form or characteristics. This encompasses emails, text messages, databases, photographs, audio recordings, and any other medium containing information relating to the conduct of the public's business. The law applies to all state agencies, local governments, school districts, and any other entity that performs a governmental function.
Making a Public Records Request
Montana law does not require requesters to identify themselves or explain why they want records, though providing contact information facilitates response. Requests should be reasonably specific about the records sought and may be made orally or in writing, though written requests are advisable for documentation purposes. Requests should be directed to the specific agency that maintains the records, typically to the agency head or designated records custodian.
Under MCA § 2-6-1003, agencies must respond to requests promptly and may not delay access for more than a reasonable period of time. While the statute does not specify an exact timeline, Montana Attorney General guidance indicates that responses should generally occur within 5 business days for straightforward requests, with extensions possible for voluminous or complex requests. Agencies must provide written justification for delays extending beyond reasonable timeframes.
Exemptions to Disclosure
Montana law provides numerous specific exemptions to public disclosure, codified primarily in MCA § 2-6-1002 through § 2-6-1005. Key exemptions include information classified as confidential by law, individual privacy information where disclosure would constitute an unreasonable invasion of privacy, records of law enforcement investigations that would interfere with ongoing investigations, attorney-client privileged communications, trade secrets, and preliminary drafts and working papers.
Notably, Montana's constitutional right to privacy creates an independent basis for withholding records. Courts apply a balancing test weighing the individual's privacy interest against the public's right to know. Personal information in government employee personnel files, medical records maintained by public agencies, Social Security numbers, and home addresses of certain public employees receive privacy protection under this framework.
Fee Schedules and Costs
MCA § 2-6-1007 authorizes agencies to charge fees for public records but limits these to actual costs. Agencies may charge for staff time spent copying documents but cannot charge for time spent locating or redacting records unless the request is for commercial purposes. Copy fees are typically limited to $0.10 to $0.25 per page for standard documents. Many agencies waive fees for small requests of fewer than 50 pages. Electronic records must be provided in electronic format when requested, generally at lower cost than paper copies.
Appeals Process
If an agency denies a records request or fails to respond within a reasonable time, requesters may appeal to the Montana Attorney General's Office, which provides informal dispute resolution. If this does not resolve the matter, requesters may file a petition for declaratory judgment or injunctive relief in district court under MCA § 2-6-1009. Courts may assess attorney fees and costs against agencies that wrongfully withhold records, providing an incentive for compliance.
HIPAA and Health Privacy
The Health Insurance Portability and Accountability Act (HIPAA) establishes federal baseline protections for health information that apply uniformly across all states, including Montana. HIPAA's Privacy Rule requires covered entities—healthcare providers, health plans, and healthcare clearinghouses—to protect the privacy of individually identifiable health information. Montana residents have all HIPAA rights, including the right to access their medical records, request corrections, receive an accounting of disclosures, and file complaints with the U.S. Department of Health and Human Services Office for Civil Rights.
Montana-Specific Health Privacy Protections
Montana supplements federal HIPAA protections with additional state-level requirements. MCA § 50-16-525 through § 50-16-553 establishes the Montana Health Information Privacy Act, which in many respects parallels HIPAA but extends protections to entities not covered by federal law and provides additional restrictions in specific contexts.
Montana law provides particularly strong protections for mental health and substance abuse treatment records. MCA § 50-16-541 requires explicit patient consent for disclosure of psychotherapy notes and imposes stricter standards for releasing mental health information than general medical records. Similarly, records related to substance abuse diagnosis and treatment receive heightened protection under both federal 42 CFR Part 2 regulations and Montana state law.
HIV/AIDS-related information receives special statutory protection under MCA § 50-16-1001 et seq., which prohibits disclosure without specific written authorization except in narrowly defined circumstances. Montana law also restricts genetic testing and disclosure of genetic information beyond federal HIPAA requirements, as previously discussed.
Accessing Your Medical Records in Montana
Montana residents have the right to access their medical records under both HIPAA and state law. Under MCA § 50-16-541, healthcare providers must provide copies of medical records within 10 business days of a written request. Providers may charge reasonable fees for copying, not to exceed actual costs. If records are maintained electronically, patients have the right to receive them in electronic format. Providers may deny access only in limited circumstances, such as when disclosure would endanger the patient or another person, and must provide written explanation of any denial.
Consumer Data Privacy Rights
Montana does not have a comprehensive consumer data privacy law equivalent to the California Consumer Privacy Act, Virginia Consumer Data Protection Act, or Colorado Privacy Act. Montana residents therefore rely primarily on federal laws, the Montana Constitution's privacy protections, and sector-specific state statutes for consumer data privacy rights.
Federal Consumer Privacy Protections
Montana residents benefit from several federal consumer privacy laws. The Fair Credit Reporting Act (FCRA) regulates consumer reporting agencies and provides rights to access credit reports, dispute inaccuracies, and control who can access credit information. Montana residents can obtain free annual credit reports from each of the three major credit bureaus through AnnualCreditReport.com, the only federally authorized source for free credit reports.
The Telephone Consumer Protection Act (TCPA) restricts telemarketing calls and requires companies to honor do-not-call requests. Montana residents can register with the National Do Not Call Registry at donotcall.gov to reduce unwanted telemarketing. The CAN-SPAM Act provides rights regarding commercial email, including the right to opt out of marketing emails.
Data Broker and People-Search Site Information
Montana law does not specifically regulate data brokers or require them to provide opt-out mechanisms. However, many data brokers and people-search websites voluntarily provide opt-out procedures, either due to industry self-regulation or to comply with laws in other states. Montana residents can request removal from these sites individually, though this requires identifying which sites have their information and following each site's specific opt-out process.
Major people-search sites with opt-out procedures include Spokeo, BeenVerified, Whitepages, Intelius, MyLife, PeekYou, and Instant Checkmate. Each has different opt-out procedures, typically requiring submission of the specific URL containing your information and verification of identity. The process can be time-consuming, and information may reappear as data brokers refresh their databases from public records and other sources.
Constitutional Privacy Protections
Montana's constitutional right to privacy provides a potential basis for challenging certain data collection or disclosure practices. While this provision has been applied primarily in contexts involving government action, it establishes Montana's strong policy preference for privacy protection. Montana courts have interpreted this provision broadly, though its application to private sector data practices remains limited without specific implementing legislation.
Credit Freeze Rights
Under federal law enacted in 2018, Montana residents have the right to place, temporarily lift, and remove security freezes on their credit reports for free. A credit freeze prevents creditors from accessing your credit report, making it difficult for identity thieves to open new accounts in your name. Montana residents can freeze their credit with Equifax, Experian, and TransUnion through each bureau's website or phone system. Freezes must be implemented within one business day of request and lifted within one hour if requested online or by phone.
Employment Background Checks & Privacy
Montana has distinctive employment laws that significantly affect background checks and employee privacy. The state's approach differs from most other states due to the Montana Wrongful Discharge from Employment Act and specific statutory restrictions on employer access to personal information.
Background Check Restrictions
Employers conducting background checks on Montana applicants or employees must comply with the federal Fair Credit Reporting Act (FCRA), which requires disclosure that a background check will be conducted, written authorization from the applicant, and adverse action procedures if information from the background check leads to a negative employment decision. Under the FCRA, applicants must be provided with a copy of the background check report and a summary of their rights before taking adverse action.
Montana law adds additional restrictions. MCA § 39-2-304 prohibits employers from requiring employees or applicants to disclose usernames or passwords for personal social media accounts or to add the employer to their social media contacts. This protection extends beyond the initial hiring process to current employees.
Criminal Records and Ban-the-Box
Montana does not have a comprehensive statewide "ban-the-box" law that prohibits employers from asking about criminal history on initial job applications. However, employers must consider the relevance of criminal convictions to the specific position. Montana's emphasis on rehabilitation and the constitutional right to privacy create a policy environment that favors limiting consideration of old or irrelevant convictions.
MCA § 46-18-204 provides that once a person has been released from state supervision for a felony conviction, the conviction may not be used against them by any person in any public or private employment. This is one of the strongest restrictions on criminal record use in employment in the nation, though it applies only after completion of supervision, not during probation or parole.
Expungement and Record Sealing
Montana provides several pathways for expunging or sealing criminal records. Under MCA § 46-18-1101 et seq., individuals may petition for expungement of criminal records after completing their sentence and waiting period. For misdemeanors, the waiting period is generally one year after completion of sentence. For felonies, the waiting period is five years, though certain serious offenses are not eligible for expungement.
Expunged records are sealed from public access and generally do not need to be disclosed on job applications, with limited exceptions for specific regulated professions or positions. The Montana Department of Justice, Criminal Records and Identification Services Bureau, maintains expunged records but restricts access to authorized purposes only.
Accessing Your Own Employment Records
Montana law provides employees with access to their own personnel files. While no specific statute mandates this for private employers, the combination of Montana's constitutional privacy rights and wrongful discharge protections creates a practical right of access. Public employees have stronger statutory rights to access their personnel files under public records laws, subject to privacy exemptions that protect certain evaluative materials.
Protecting Yourself in Montana
Montana residents can take concrete steps to protect their privacy and personal information. The following practical guidance provides actionable measures for controlling your personal data.
Step 1: Freeze Your Credit Reports
Contact each of the three major credit bureaus to place a security freeze on your credit reports. For Equifax, visit equifax.com/personal/credit-report-services or call 800-349-9960. For Experian, visit experian.com/freeze/center.html or call 888-397-3742. For TransUnion, visit transunion.com/credit-freeze or call 888-909-8872. You will receive a PIN or password to lift the freeze when needed. This is free under federal law and provides the strongest protection against identity theft involving new account fraud.
Step 2: Opt Out of People-Search Websites
Systematically remove your information from major people-search sites. Start by searching for yourself on Spokeo.com, Whitepages.com, BeenVerified.com, Intelius.com, and MyLife.com. For each site where you appear, locate their opt-out page (usually in the privacy policy or help section), follow the specific procedures, and document your requests. This process typically requires the URL of the page displaying your information and email verification. Note that removal is not permanent, and you may need to repeat the process periodically.
Step 3: Register with Do-Not-Call and Do-Not-Mail Services
Register your phone numbers with the National Do Not Call Registry at donotcall.gov or by calling 888-382-1222 from the phone you wish to register. To reduce direct mail marketing, register with DMAchoice.org, the Direct Marketing Association's mail preference service. These services significantly reduce, though do not eliminate, unwanted marketing contacts.
Step 4: Request Your Public Records
Identify what public records exist about you by requesting records from relevant Montana agencies. Submit public records requests to county clerk and recorder offices for property records, the Montana Department of Justice for criminal history records, and the Montana Department of Motor Vehicles for driving records. Understanding what information is publicly available allows you to identify and potentially correct inaccuracies.
Step 5: Pursue Expungement if Eligible
If you have a criminal record and meet Montana's eligibility requirements under MCA § 46-18-1101 et seq., file a petition for expungement with the district court in the county where the conviction occurred. The petition must include information about the conviction, proof of completion of sentence, and a statement explaining why expungement serves the interests of justice. The Montana Department of Justice provides forms and guidance at dojmt.gov. Consider consulting with an attorney experienced in Montana expungement proceedings, as the process involves specific procedural requirements and court hearings.
Step 6: Monitor Your Information Regularly
Establish a routine for monitoring your personal information. Check your credit reports from all three bureaus annually through AnnualCreditReport.com. Review your financial accounts regularly for unauthorized transactions. Search for yourself on major search engines and people-search sites quarterly to identify newly appearing information. Set up Google Alerts for your name to receive notifications when new information appears online.
Key Montana Contacts for Privacy Protection
Montana Attorney General's Office, Consumer Protection Division: 800-481-6896 or contactoag.mt.gov for privacy complaints and guidance. Montana Department of Justice, Criminal Records and Identification Services: 406-444-3625 for criminal history records and expungement questions. Montana Commissioner of Securities and Insurance: 800-332-6148 for financial privacy and insurance information concerns. Federal Trade Commission: identitytheft.gov or 877-438-4338 for identity theft reporting and recovery assistance.
Montana Data Breach Notification Requirements
Montana's data breach notification law, MCA § 30-14-1704, establishes specific requirements for entities that experience security breaches involving Montana residents' personal information. Understanding these requirements helps Montana residents know what to expect if their information is compromised and what obligations organizations have.
Who Must Notify
Any person or business that conducts business in Montana and owns or licenses computerized data containing personal information must provide notification following discovery or notification of a security breach. This applies to Montana businesses and to out-of-state companies that maintain information about Montana residents. Third-party service providers that maintain data on behalf of other businesses must notify the data owner of breaches, and the data owner then has notification obligations to affected individuals.
What Triggers Notification
A breach of security means unauthorized acquisition of computerized data that materially compromises the security, confidentiality, or integrity of personal information. Personal information includes a Montana resident's first name or initial and last name combined with: Social Security number, driver's license or Montana identification card number, account number or credit/debit card number combined with security code or password, or health information. Unlike some states, Montana does not provide a safe harbor for encrypted data—even breaches of encrypted information must be reported if there is reasonable likelihood of harm.
Notification Timeline
Montana law requires notification "without unreasonable delay," but does not specify an exact number of days. This language gives entities some flexibility to investigate the breach and determine its scope before notifying, but unreasonable delays can result in enforcement action. The Montana Attorney General's office has indicated that notification should generally occur within 30 days of discovery absent extenuating circumstances, though this is guidance rather than a statutory requirement.
Notification Methods and Content
Notification must be provided by written notice, electronic notice if consistent with the E-SIGN Act provisions, or telephone contact. For large breaches where costs exceed $250,000 or affected individuals exceed 500,000, substitute notice is permitted through email, conspicuous posting on the entity's website, and notification to major statewide media. Notification must include a description of the breach, the types of information compromised, steps taken to secure the data, contact information for the entity, and advice that individuals review their financial accounts and credit reports.
Attorney General Notification
If a breach affects more than 1,000 Montana residents, the entity must also notify the Montana Attorney General's Office. This notification should be provided in the same timeframe as individual notifications and should include details about the nature of the breach, number of affected Montana residents, and steps being taken to address the breach.
Penalties for Non-Compliance
Violations of Montana's data breach notification law constitute unfair or deceptive trade practices under the Montana Consumer Protection Act, MCA § 30-14-103. The Attorney General may seek civil penalties up to $10,000 per violation, injunctive relief, and restitution for affected consumers. Additionally, failure to provide required notification may expose entities to common law liability for negligence or breach of fiduciary duty and may serve as evidence in private lawsuits by affected individuals.
Children's Privacy in Montana
Children's privacy receives protection through both federal laws that apply in Montana and state-specific provisions addressing student records and children's information.
COPPA Compliance
The federal Children's Online Privacy Protection Act (COPPA) applies to operators of websites and online services directed to children under 13 and to operators with actual knowledge they are collecting information from children under 13. COPPA requires verifiable parental consent before collecting, using, or disclosing personal information from children, and mandates specific privacy policy disclosures and data security measures. Montana parents can exercise COPPA rights by reviewing website privacy policies, providing or withholding consent for their children's information collection, and requesting access to or deletion of information collected from their children.
Student Records and FERPA
The federal Family Educational Rights and Privacy Act (FERPA) protects the privacy of student education records and applies to all schools receiving federal funding, which includes nearly all Montana public schools and most private schools. Under FERPA, Montana parents have the right to inspect and review their children's education records, request amendments to inaccurate records, and control disclosure of personally identifiable information from education records, with certain exceptions.
Montana supplements FERPA with state law provisions in MCA § 20-5-212, which addresses school records confidentiality and establishes that permanent student records and all information contained therein are confidential and may be released only with parental consent or as otherwise provided by law. Montana school districts must maintain policies governing education records access and disclosure that comply with both federal and state requirements.
Montana-Specific Protections
Montana law provides additional protections for children's information in specific contexts. MCA § 40-15-101 et seq., the Montana Youth Court Act, restricts access to juvenile justice records and provides for sealing of records in many cases. Youth court records are generally confidential and not subject to public disclosure, with limited exceptions for victims' rights and serious offenses. Montana also restricts dissemination of child abuse and neglect information under MCA § 41-3-205, limiting access to individuals with a legitimate need to know for child protection purposes.
Frequently Asked Questions
Does Montana have a comprehensive consumer privacy law like California or Virginia?
No, Montana does not currently have a comprehensive consumer data privacy law similar to the California Consumer Privacy Act or Virginia Consumer Data Protection Act. Montana residents' privacy rights come from the state constitutional right to privacy in Article II, Section 10, sector-specific statutes addressing areas like data breach notification and employment privacy, and federal laws such as HIPAA, FCRA, and COPPA. While Montana's constitutional privacy protection is among the strongest in the nation, it primarily applies to government action rather than private sector data practices. Montana residents seeking to control how private companies collect and use their personal information must rely primarily on federal laws and company-specific privacy policies.
How do I access my criminal history records in Montana?
Montana residents can request their criminal history records from the Montana Department of Justice, Criminal Records and Identification Services Bureau. Submit a request through the Montana Department of Justice website at dojmt.gov or by mail to Criminal Records, P.O. Box 201403, Helena, MT 59620-1403. You will need to complete a fingerprint card and provide identification. The current fee is $10 for state records. For FBI national criminal history records, the fee is approximately $35. Processing typically takes 2-4 weeks. If you identify inaccuracies in your criminal history record, you can challenge them by submitting documentation to the Criminal Records Bureau demonstrating the error.
Can my employer in Montana monitor my email and internet use at work?
Yes, Montana employers can generally monitor employee email and internet use on company-owned devices and networks, but Montana law provides more employee protection than most states. MCA § 39-2-302 requires employers to notify employees of any electronic monitoring of communications. This means your employer cannot secretly monitor your electronic communications—they must inform you that monitoring may occur. This notification requirement distinguishes Montana from most states, where employers can monitor without notice. However, this protection applies only to workplace communications on employer-provided systems. Your employer generally cannot require access to your personal social media accounts under MCA § 39-2-304.
How long does it take for Montana agencies to respond to public records requests?
Montana's public records law, MCA § 2-6-1003, requires agencies to respond "promptly" but does not specify an exact timeframe. Montana Attorney General guidance indicates that straightforward requests should receive responses within approximately 5 business days. However, agencies may take longer for voluminous or complex requests that require extensive review or redaction. If an agency needs additional time, they should notify you of the delay and provide an estimated completion date. If an agency fails to respond within a reasonable time or denies your request improperly, you can file a complaint with the Montana Attorney General's Office or pursue judicial review through district court. Agencies that wrongfully withhold records may be required to pay your attorney fees.
Can I expunge my criminal record in Montana?
Yes, Montana provides statutory procedures for expunging criminal records under MCA § 46-18-1101 et seq. Eligibility depends on the offense type and time since completion of your sentence. For misdemeanors, you may petition for expungement one year after completing your sentence. For felonies, the waiting period is five years. Certain serious offenses, including sexual offenses requiring registration and offenses involving serious bodily injury or death, are not eligible for expungement. To pursue expungement, file a petition with the district court in the county where the conviction occurred. The court will consider factors including the nature of the offense, your behavior since conviction, and the interests of public safety. Successfully expunged records are sealed and generally need not be disclosed on job applications, with limited exceptions for specific regulated positions.
What should I do if a company experiences a data breach involving my personal information?
If you receive notification of a data breach involving your personal information, take immediate action to protect yourself. First, review the breach notification carefully to understand what specific information was compromised. If the breach involved Social Security numbers, financial account information, or credit card numbers, place a fraud alert or security freeze on your credit reports with all three credit bureaus immediately. Monitor your financial accounts closely for unauthorized transactions and review your credit reports for suspicious activity. Consider enrolling in credit monitoring services if offered by the breached company. Change passwords for any affected accounts and any other accounts using the same password. If you notice fraudulent activity, report it immediately to your financial institutions and file a report with the Federal Trade Commission at identitytheft.gov. You may also report the breach to the Montana Attorney General's Office at 800-481-6896 if you believe the company failed to provide timely notification or adequate protective measures.
Are my medical records private in Montana?
Yes, your medical records receive strong privacy protection in Montana through both federal HIPAA requirements and Montana state law. Healthcare providers, health plans, and healthcare clearinghouses must comply with HIPAA's Privacy Rule, which restricts disclosure of your individually identifiable health information without your authorization, with limited exceptions for treatment, payment, and healthcare operations. Montana law provides additional protections in MCA § 50-16-525 et seq. and extends to entities not covered by HIPAA. Mental health records, substance abuse treatment records, HIV/AIDS-related information, and genetic testing results receive heightened protection under Montana law. You have the right to access your medical records, request corrections to inaccurate information, and receive an accounting of disclosures. Healthcare providers must provide copies of your medical records within 10 business days under MCA § 50-16-541. If you believe your medical privacy has been violated, file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.
How do I remove my personal information from people-search websites?
Removing your information from people-search websites requires systematic effort, as Montana law does not mandate opt-out procedures for data brokers. Start by searching for yourself on major sites including Spokeo, Whitepages, BeenVerified, Intelius, MyLife, PeekYou, Instant Checkmate, TruthFinder, and USSearch. For each site displaying your information, locate their opt-out or privacy page (typically linked in the privacy policy or help section). Most sites require you to find the specific URL of the page displaying your information, submit it through their opt-out form, and verify your email address. Document each opt-out request with screenshots and confirmation emails. Be aware that removal is not permanent—people-search sites continuously refresh their databases from public records and other sources, so your information may reappear. Plan to repeat the opt-out process every 6-12 months. Consider using opt-out service companies that automate this process for a fee, though these services cannot guarantee permanent removal. For public records maintained by government agencies, such as property records or court records, contact the specific agency to understand what information is legally required to be public and what options exist for restricting access.