Compliance Radar · Privacy and consent
Maryland Online Data Privacy Act takes effect with strict data minimization
Maryland limits data to what a service needs, bans sensitive data sales and covers nonprofits.
- Status
- In force
- Takes effect
- October 1, 2025; applies to processing from April 1, 2026
- Announced
- May 9, 2024 (Chapter 455, SB 541)
- Type
- law
What changed
Collection is limited to what the requested service needs. Selling sensitive data is banned, as are targeted ads to users known to be under 18. Honoring GPC is the safer course.
Who it affects
Businesses with data of 35,000+ Maryland consumers (10,000+ with over 20% of revenue from data sales).
What to do
- Remove form fields and tags the service doesn't need.
- Stop any sale of sensitive data.
- Turn off targeted ads for users under 18.
What ComplyMo already handles
Page audits and daily re-checks: Growth and up. Everything else: every plan, from $19 a month.
Sources
- Maryland General Assembly: SB 541 (2024) (opens in a new tab)
- Maryland Chapter 455 (2024) enacted text (opens in a new tab)
Summary of public sources, not legal advice.