Maine Privacy Law (LD 1822): What Businesses Should Know in 2026

Maine Is on the Verge of a Landmark Privacy Law

Maine's LD 1822 — the Maine Online Data Privacy Act — is advancing through the legislature and could become one of the strongest state privacy laws in the US if enacted. The bill passed the Maine House on February 10, 2026, and the Senate on March 6, 2026. Because the Senate amended the bill, it must return to the House for concurrence before it can be sent to the governor.

Important: This bill is not yet enacted. It still requires House concurrence on Senate amendments and the governor's signature. This article covers the bill as it currently stands and what businesses should watch for.

What Makes Maine's Bill Different

While most state privacy laws follow a framework similar to Virginia's CDPA, Maine's bill takes a notably stronger approach in several areas:

Strong Data Minimization

Unlike most state laws that allow broad "business purpose" justifications for data collection, Maine's bill would require businesses to limit data collection to what is strictly necessary for the specific service the consumer requested. This is closer to the EU's GDPR approach than any existing US state law.

Ban on Selling Sensitive Data

The bill would completely ban the sale of sensitive personal data, including precise geolocation information, health data, biometric data, and data revealing racial or ethnic origin. Other states allow the sale of sensitive data with consumer consent — Maine would prohibit it entirely.

Civil Rights Protections

LD 1822 includes provisions that prohibit data-driven discrimination, making it one of the first state privacy laws to explicitly address civil rights in the context of personal data use.

Restrictions on Targeted Advertising

The bill would impose sweeping restrictions on companies' ability to collect data for and deliver targeted advertising, going further than opt-out-based approaches used in most other states.

Proposed Effective Date

If enacted, the Maine Online Data Privacy Act would take effect on July 1, 2026 — giving businesses a very short window to comply if it passes. This aggressive timeline is worth monitoring closely.

Who Would It Apply To?

While the final applicability thresholds may change during reconciliation, the bill is expected to apply to businesses that operate in Maine or target Maine consumers and meet certain data processing thresholds. Businesses already complying with other state privacy laws will have a head start, but Maine's stricter data minimization and sensitive data requirements may require additional compliance work.

What Should Businesses Do Now?

Monitor the bill's progress — the House must vote on the Senate amendments, and the governor must sign. Follow our state law tracker for updates.
Audit your data minimization practices — if you collect data beyond what is strictly necessary for your core service, Maine's law could require significant changes
Review sensitive data sales — if you sell or share precise location, health, or biometric data, prepare for a potential outright ban
Assess your targeted advertising practices — businesses relying heavily on behavioral advertising should evaluate alternatives
Check your existing compliance — use our privacy law calculator to understand which state laws already apply to you and compare requirements across states

How Maine Compares to Existing State Privacy Laws

If enacted as proposed, Maine would join a small group of states with stronger-than-average privacy protections. Among the 20 states with existing privacy laws, most follow an opt-out model for data sales and sharing. Maine's data minimization mandate and sensitive data sale ban would set it apart. Only time will tell whether the final version retains these provisions.

Last updated: March 28, 2026.