Maryland
Coverage plannedAlso: MODPA
VERIFIED 2026-09-17 · REVIEW BY 2026-12-16
Sensitive data may be collected or processed only where strictly necessary to provide a product or service the consumer requested, and it may not be sold; the statute gives no consent exception for either.
Instruments
No instrument recorded for Maryland yet.
Regulator
Exercisable rights
Access, deletion, correction, portability, a list of third-party categories and opt-out, with a duty to limit collection to what is reasonably necessary and proportionate
Through each lens
End user / data subject
What can I actually do about this today, and what does it cost me.
No end user / data subject analysis for Maryland yet.
Business
What does this obligate us to build, and by when.
No business analysis for Maryland yet.
Government
Government is one lens carrying two sub-lenses, each with judicial reviewability analysis.
No government analysis for Maryland yet.
Policymaker
What did the drafters intend, and what did the text achieve.
No policymaker analysis for Maryland yet.
Regulator / enforcer
What can this authority make stick on appeal.
No regulator / enforcer analysis for Maryland yet.
Certifying body
What is the scope of what we are attesting to.
No certifying body analysis for Maryland yet.
Front-line staff
What do I do when this lands on my desk.
No front-line staff analysis for Maryland yet.
Human rights / privacy advocate
Who does this regime fail, and can that be shown.
No human rights / privacy advocate analysis for Maryland yet.
Legal effects
No legal effect of any certification is recorded for Maryland yet.
Sources
- Maryland Online Data Privacy Act, Com. Law §§ 14-4701 et seq., §§ 14-4705(b), 14-4707(a)(1)-(2), (b)(1)(i), 14-4713 and 14-4714 · retrieved 2026-09-17 · https://mgaleg.maryland.gov/mgawebsite/Laws/StatuteText?article=gcl§ion=14-4705&enactments=false