Regulations library · US states

MODPA

Maryland Online Data Privacy Act

In force Maryland privacy consumer rights

The strictest state law on data minimization: collection must be reasonably necessary for the service, and selling sensitive data is prohibited.

At a glance

Who it applies to
Businesses that process personal data of the state's residents above the law's thresholds. Thresholds, exemptions and sensitive-data rules differ by state.
Who enforces it
State Attorney General
When
In effect since 1 October 2025.

A practical guide to this law, with scenarios and flashcards, is being written. The summary above is the reference entry.

Recent developments

Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.

Sources

Dates and status checked against these sources on 27 September 2026. This page explains the law for practitioners; it is not legal advice.