Maryland Privacy Compliance Checklist

Maryland Online Data Privacy Act — Step-by-step guide to compliance

Compliance Steps

Effective: October 1, 2025

1
Assess applicability — note the lower thresholds of 35,000 consumers or 10,000+ with 20% data sale revenue
2
Implement strict data minimization practices — only collect data reasonably necessary for the disclosed purpose
3
Implement universal opt-out signal recognition (GPC and similar mechanisms)
4
Update privacy notices with all MODPA-required disclosures
5
Implement consumer rights request mechanisms with 45-day response period
6
Obtain opt-in consent for processing sensitive personal data
7
Review and restrict processing of minor data — no sale or targeted advertising for consumers under 18

Key Enforcement Details

Enforced By

Maryland Attorney General

Penalty / Violation

$10,000

Cure Period

None

Private Right of Action

Disclaimer: PrivacyLawMap provides general information about US state privacy laws for educational purposes only. This is NOT legal advice. Privacy laws are complex and frequently amended. Consult with a qualified privacy attorney for advice specific to your business. PrivacyLawMap makes no warranties about the accuracy or completeness of this information.