Understanding Chapter 13

A simple, in-plain-words guide to the Minnesota Government Data Practices Act — written so you don't need a law degree to follow it. It covers what the law does, how a few of its most-used sections work, and a couple of court cases that change how you should think about "your" data.

This page is not legal advice
What is Chapter 13?

Chapter 13 of the Minnesota Statutes — the Minnesota Government Data Practices Act (MGDPA) — is the law that decides who can see data collected, created, or kept by Minnesota government entities: state agencies, counties, cities, school districts, and similar bodies. Its starting premise, in section 13.03, subdivision 1, is simple: all government data is public unless a specific state or federal law says otherwise. The rest of the chapter is mostly a very long list of those exceptions — which data is private, confidential, or nonpublic, and under what conditions someone can still get access to it anyway.

Two other things worth knowing up front:

  • "Public" data can be seen by anyone, for any reason (or no reason) — the requester doesn't have to explain why they want it.
  • "Private" or "confidential" data is restricted to certain people, most often the person the data is about (called a "data subject"). This is exactly why the Act draws such a sharp line, described below, between the general public's right to see public data and a data subject's separate right to see data about themselves.
13.03 vs. 13.04: Two different doors to the same building

These two sections get confused constantly because they both start with "a person can request data" — but they answer different questions and apply to different data.

🌐

13.03, subd. 3 — anyone, public data

Governs a member of the public asking to inspect or copy data that's already classified as public. The requester doesn't need to be the subject of the data, doesn't need to give a reason, and doesn't need to be a Minnesota resident. The entity must let them inspect it free of charge at a reasonable time and place, and may only charge actual copying costs (capped at 25¢/page for the first 100 black-and-white pages).

👤

13.04, subd. 3 — the data subject, their own data

Governs an individual asking whether they are the subject of stored data, and if so, seeing it — even if that data is classified private (not public to everyone else). This is a personal right tied to being the subject, not a general transparency right. It comes with a much tighter clock: the entity must comply immediately if possible, or within 10 business days otherwise — faster than 13.03's general "reasonable time" standard.

In short: 13.03 is "show the public what's public." 13.04 is "show me what you have about me, public or not."
Case spotlight: Webster v. Hennepin County, 910 N.W.2d 420 (Minn. 2018), No. A16-0736

Tony Webster asked Hennepin County for emails and documents about its use of fingerprint, iris, and facial recognition technology. The county said running a proper keyword search through its records would be too much work, and offered a narrower, less thorough search instead.

The Minnesota Supreme Court sided with Webster. Section 13.03 requires a government entity to keep its data organized well enough to be "easily accessible for convenient use" — and the Court held that "too much work" isn't a valid reason to skip a reasonable search using tools the entity already has, like keyword searching its own email system. In plain terms: a government entity can't shrug off a data request just by saying a proper search would take effort. It has to actually look.

13.04, subd. 2: the Tennessen warning — what they have to tell you before they collect

Before a government entity collects private or confidential data directly from you, Section 13.04, subdivision 2 generally requires it to give you a notice — nicknamed a "Tennessen warning" after the 1975 court case that prompted it — covering four specific things: (1) why it wants the data and what it'll be used for, (2) whether you're legally required to give it or can refuse, (3) what happens either way if you refuse, and (4) who else is authorized to see it. One notable exception: this notice isn't required when law enforcement is collecting investigative data as part of an investigation.

Real example from this archive: Advisory Opinion 17-004 (City of Duluth)

The City of Duluth hired an outside administrator to run its self-insured employee health plan, including sending forms to plan participants to collect their information. The City asked the Commissioner whether that collected data counted as "government data," and whether the administrator had to give participants a privacy notice before collecting it.

The Commissioner opined that because the administrator was performing a government function for the City under section 13.05, subdivision 11, the data it collected was government data, classified as private — and that the administrator was required to give participants a Tennessen warning notice before collecting it, the same as if the City had collected it directly.

Read the full opinion (17-004) →
See 26 opinions mentioning it →
Case spotlight: Burks v. Metropolitan Council (2016)
Burks v. Metropolitan Council, 884 N.W.2d 338 (Minn. 2016), No. A14-1651 (decided August 24, 2016)

A Metro Transit bus passenger, Robert Burks, had a heated exchange with a bus driver that was captured on the bus's video system. Burks asked for a copy of the recording under Chapter 13. Metro Transit (part of the Metropolitan Council) refused, arguing that because the video also depicted the driver — making the driver a data subject too, with a privacy interest in footage that could reflect on the driver's job performance — it couldn't hand the video to Burks without the driver's consent or a court order.

The Minnesota Supreme Court sided with Burks. In plain terms: the law defines "data on individuals" (13.02, subd. 5) to allow for more than one subject in the same record — the Court pointed out that the driver, Burks, and even bystanders in the video were all "subjects" of that one recording. Under the Court's reading, Chapter 13 only asks whether a requester is a subject of the data, not whether they're the only subject.

What this means for you

This matters a lot in practice: if a record about you also includes someone else's private information, the government usually still has to give you the whole record — not a version with everything about that other person blacked out. Being one of the people in the record is normally enough, even if you're not the only one in it. (There can still be exceptions depending on the details, which is why the Commissioner keeps deciding these cases one at a time — see the "Multiple data subjects" opinions archived on this site.)

See 19 opinions tagged "Multiple data subjects" →
13.43: Personnel data (employees and contractors)

Section 13.43 covers data about people who work for or are engaged by a government entity — and it explicitly reaches further than just employees: it also covers volunteers and independent contractors. A request about someone with a government contract is generally analyzed under this section, not as a general "contracts" search.

Generally public: name, gross salary, job title, employment dates, work location, the existence and final disposition of any complaint that resulted in disciplinary action, and (above certain dollar thresholds) settlement agreements. Generally private: the underlying investigative details behind a complaint until final action is taken, most home/personal contact information, and similar. Applicant data (people who applied but weren't hired) has its own, more restrictive rules under subdivision 3 — notably, an applicant's name stays private unless they become a finalist.

See 230 opinions tagged "Personnel data" →
13.46: Welfare data

Section 13.46 covers data about people collected by the "welfare system" — a term that covers more than you might expect. It includes the Department of Human Services, the Department of Children, Youth, and Families, county social services and public health agencies, and contractors who provide welfare services for those agencies. It covers records tied to SNAP, medical assistance, child care assistance, child support, and similar programs.

Welfare data works backwards from most government data: instead of starting out public, it's private by default, and only becomes accessible when a specific exception applies. Common exceptions include a court order, certain police investigations, agencies checking each other's records for eligibility or fraud, and child support enforcement. Mental health data is protected even more tightly than other welfare data (subdivision 7). And there's a separate set of rules for data about a provider (as opposed to a person receiving benefits) under subdivision 4: a provider's name and whether their license is active are public, but who reported them and their financial details are not.

See 18 opinions tagged "Welfare data" →
13.05, subd. 11: when a contractor becomes "the government" for data purposes

Government entities routinely hire private businesses to perform work the entity would otherwise do itself — running a program, managing a facility, providing a service. Section 13.05, subdivision 11 ("Privatization") closes what would otherwise be an obvious loophole: a private company can't escape Chapter 13 just because it isn't the government. This applies to any individual or organization that contracts with a government entity to perform a government function — a giant corporation, a one-person consultant, a nonprofit, a healthcare plan, all the same. When that private person or business "agrees to perform a government function," the data it creates, collects, or keeps in the course of performing that function is subject to Chapter 13 exactly as if the company were the government entity itself. The law also requires every such contract to include a notice stating that this subdivision applies.

Real example from this archive: Advisory Opinion 01-052 (Delta Dental)

Delta Dental Plan of Minnesota was a dental subcontractor for BluePlus, a health plan that Blue Cross Blue Shield of Minnesota operated under contract with the Department of Human Services (DHS) to provide the Prepaid Medical Assistance Program (PMAP) — Minnesota's managed-care version of Medical Assistance. The state's contract with the health plan explicitly required it to keep records "in accordance with...Chapter 13" and to be treated "as part of the welfare system as defined in...Section 13.46." The Commissioner found Delta Dental bound by that same chain of obligations, and ruled it had violated Chapter 13 by redacting the identity of a reviewer who had denied a claim.

Read the full opinion (01-052) →
Here's how that played out for Delta Dental: the state's contract with BluePlus said BluePlus had to follow Chapter 13, and BluePlus's own contract with Delta Dental said the same rule applied to Delta Dental too. So even though Delta Dental is a private company, not a government agency, it ended up having to follow the same public-records rules — because the requirement got passed down the chain. The same would be true for any other company working under BluePlus, like a pharmacy benefit manager. And this isn't just something from an old 2001 case — the same requirement is still around today. Every provider that signs up for Minnesota Health Care Programs has to sign Form DHS-4138, the current standard provider agreement, which requires their staff to be trained on Chapter 13 (including the welfare-data rules in 13.46), the Minnesota Health Records Act, and HIPAA.
Helmberger v. Johnson Controls, Inc., 839 N.W.2d 527 (Minn. 2013), No. A12-327

This is worth knowing because the rule above wasn't always so airtight. A journalist asked Johnson Controls — a contractor hired by a school district — for a copy of its subcontract with another private company. The Minnesota Supreme Court held that the subcontract wasn't covered, because the underlying contract didn't include the notice subdivision 11 requires — meaning, at the time, a contractor's obligations only attached if the government entity remembered to include that notice.

Why this history matters

The Minnesota Legislature closed this loophole in 2014, amending subdivision 11 to make clear that a contractor's data practices obligations apply regardless of whether the contract actually included the required notice. In other words, the current statute no longer exempts a contractor's data on that work just because the required notice is missing from its contract — the obligation applies either way. (This is exactly the kind of history where "read the statute" isn't enough on its own — the 2013 case and the 2014 fix are both part of the real story, and a court or the Data Practices Office would look at whichever version applies to the dates involved.)

13.82: police and investigative data — what's public, what isn't

Section 13.82 splits law enforcement data into pieces, some always public, some only public once an investigation closes.

Always public, regardless of an investigation's status: arrest data (time, date, place, charges, the arresting officers, custody status — subd. 2); request-for-service data — this is the basic "someone asked for help" record, including 911 calls: what was reported, when, and how the agency responded (subd. 3); and response/incident data (a timeline, location, personnel involved, a brief factual summary of what happened, and victim/witness names — subd. 6).

While an investigation is active, the investigative file itself (interview notes, evidence, analysis) is confidential or protected nonpublic, beyond the always-public pieces above. It generally becomes public once the investigation goes inactive — the agency decides not to pursue charges, the statute of limitations runs out, or all appeals are exhausted — unless releasing it would still jeopardize a related case. Some things stay protected even after that: the identities of undercover officers, sexual assault victims, informants, and certain witnesses can be withheld regardless of the investigation's status, and recordings "clearly offensive to common sensibilities" stay nonpublic even once inactive (though the fact that they exist doesn't).

See 94 opinions tagged "Law enforcement data" →
13.825: body cameras

Section 13.825 covers footage from police body cameras and other "portable recording systems." The default is the opposite of most police data: most body camera footage is private or nonpublic, not public, unless it falls into one of a few specific public categories.

Generally public: footage of an officer firing a gun (in situations where the officer has to report it), and footage of a use of force that causes substantial bodily harm.

A person who appears in the footage can ask to inspect it — watch it in person, without a copy — and see everyone in it, unredacted. Getting an actual copy to keep is a separate request with a different rule: for a copy, the agency has to blur or otherwise remove anyone else in it who didn't consent to being shown, unless that person is an on-duty officer (an officer's identity generally can't be hidden this way). Someone involved in a vehicle crash that a body camera recorded can request an unredacted copy, but only for use in an insurance claim or a court case about the crash.

How long the agency has to keep it: ordinary footage only has to be kept 90 days before it can be deleted. Footage from a shooting, or a use of force causing substantial bodily harm, or tied to a complaint against an officer, has to be kept at least a year. Footage of an officer using deadly force has to be kept indefinitely. The statute also allows a request that a specific recording be held longer, up to 180 additional days, for potential use as evidence.

How Chapter 13 relates to medical records and the MN Health Records Act

This trips people up because there are actually two different Minnesota laws in play, and they don't cover the same things.

Where does the right to see one's own medical records come from?

Mostly from a separate law, the Minnesota Health Records Act (Minn. Stat. 144.291–144.298) — not Chapter 13. It applies to any health care provider, public or private, regardless of whether the patient is on Medical Assistance or paying cash. It requires the provider to give the patient "complete and current information" from their record, including a treating provider's own handwritten notes.

How does this compare to the federal HIPAA law?

On one specific point, Minnesota's law goes further than HIPAA. HIPAA generally lets a therapist keep their own separately-stored therapy notes (what HIPAA itself calls "psychotherapy notes") out of a patient's records request. Minnesota's Health Records Act does not include that exception. On top of that, HIPAA has its own rule that whenever a state law gives patients more access than HIPAA's federal minimum, the state law applies instead. Put together, a Minnesota therapist generally cannot point to HIPAA alone as a reason to keep a patient's own therapy notes from them. Both laws still allow one narrow exception either way: a provider can leave out a specific piece of information if sharing it would clearly harm the patient.

Does a request have to be made on the provider's own form?

The statute does not say so. It requires a written request, and does not say it must be on any particular form — a signed letter naming the patient and what's being requested meets the statute's own requirement. Many providers offer their own form because it's easier for staff to process, but a plain written request is enough under the statute. Once a provider gets one, the statute generally gives it 30 calendar days to hand over the records.

So where does Chapter 13 fit in?

It applies on top of the Health Records Act specifically when the provider is itself a government entity (a county-run clinic or public hospital), or when a private provider or health plan is standing in for the government under the 13.05, subd. 11 contractor rule described above — which is exactly the Delta Dental / PMAP situation: because Medical Assistance managed care runs through a state contract, the data the plan and its network generate in administering that coverage can carry Chapter 13 requirements in addition to whatever the Health Records Act already requires.

In short: the Health Records Act is the broader of the two laws for a basic "get my chart" request — it applies to any hospital or clinic, regardless of any government contract. Chapter 13 layers on top specifically when the provider is itself a government entity, or when a Medical Assistance managed-care plan or one of its subcontractors is involved, under the 13.05, subd. 11 concept described above.
A few other sections worth knowing
📜

13.072 — advisory opinions (this whole site)

This is the section that lets anyone ask the Commissioner of Administration for a written ruling on how Chapter 13 applies to a specific situation. That written ruling is called an Advisory Opinion — it's why every document archived on this site exists. Government entities are expected to follow an advisory opinion, and it carries real weight, but it isn't quite the same as a judge's decision in an actual lawsuit: a court that later looks at the same question isn't required to reach the same conclusion.

🏛️

Chapter 13D — the Open Meeting Law

A close cousin of Chapter 13, not technically part of it: this is the law requiring most government bodies to meet in public, give proper notice, and keep records of any closed session. It's the second-most common subject in this archive after data requests themselves.

See 103 Open Meeting Law opinions →
⚖️

13.08 — remedies

If a government entity won't comply, this section is where the Act's teeth are: it allows a civil lawsuit for damages, and lets a court order compliance. An advisory opinion isn't itself enforceable, but it's often the first, much cheaper step before anyone considers heading to court.

🗝️

13.02, subd. 16 — the "responsible authority"

Every government entity has to designate a specific official as its "responsible authority" — for a city, typically the clerk; for a school district, the superintendent; for a state agency, an official designated by law or the commissioner. This is the person (or their designee) who actually receives and answers data requests and is accountable for the entity's compliance.

🔍

13.39 — civil investigative data

Covers data gathered while investigating a potential civil (not criminal) legal action — think code enforcement, licensing investigations, or a government entity building a case. While active, it's generally protected nonpublic or confidential; once the investigation goes inactive (no action taken, statute of limitations expires, or appeals are exhausted), it generally becomes public unless releasing it would jeopardize another pending civil action. A complainant can always see their own statement, even mid-investigation.

🚨

13.055 — if there's a data breach

If a government entity discovers that someone got into private or confidential data without permission — a hacked system, a misdirected file, an employee snooping where they shouldn't — this section requires it to tell everyone affected "without unreasonable delay," by mail, email, or (for very large breaches) a public notice. If more than 1,000 people are affected, it also has to notify the major credit-reporting agencies. Afterward, the entity has to write up an investigation report covering what data was taken, how many people were affected, and what happened to any employee responsible — and that report becomes public once the investigation is done.

🗄️

Records retention — a different question entirely

This isn't "can I see this data," it's "does this record still have to exist at all." A separate law, the Official Records Act (Minn. Stat. 15.17), requires government entities to actually keep the records they create, protect them from being lost or destroyed, and hand them off properly when an official leaves office. Most entities follow a records retention schedule spelling out exactly how long each type of record must be kept before it can legally be thrown out. Chapter 13 decides who gets to see a record while it exists; this law decides how long it has to stick around in the first place.

📏

Chapter 645 — how to read a law that's unclear

This one isn't about data at all — it's the rulebook courts and the Data Practices Office fall back on whenever a law's wording is genuinely unclear, a process lawyers call "statutory construction." The core rule is simple: if a law's words are plain, follow them exactly as written — don't go looking for a hidden meaning. Only when the wording is truly ambiguous do interpreters turn to things like why the law was passed, what problem it was meant to fix, and how similar laws have been read before, to figure out what the Legislature actually meant. It shows up often in this archive because a lot of Data Practices Act disputes really come down to "what did this one word or phrase in Chapter 13 mean" — and Chapter 645 is the rulebook for answering that.