Maryland Online Data Privacy Act
Maryland Online Data Privacy Act (MODPA)
Maryland · 2024 Md. Laws ch. 440 (SB 541); Md. Code Ann., Com. Law §§ 14-4601–14-4626
- Status
- In effect
- Took effect
- October 1, 2025
- Applies to
- Controllers processing data of 35,000+ MD residents/year, or 10,000+ with 20%+ revenue from data sales
- Enforced by
- Maryland Attorney General
Maryland's privacy law is stricter than most: it prohibits processing sensitive personal data unless strictly necessary for the requested service. Consumers can access, correct, delete, and port their data, and opt out of automated profiling and targeted advertising. AG enforcement began April 2026.
Who is protected: Maryland residents
Legal detail
MODPA (SB 541), Md. Code Ann., Com. Law §§ 14-4601 et seq., eff. Oct. 1, 2025 (AG enforcement Apr. 1, 2026); strict-necessity standard for sensitive data; data protection assessments for algorithmic decision-making; profiling opt-out.
Key facts
| Jurisdiction | Maryland |
|---|---|
| Level | State |
| Strength | Limited |
| Enacted | May 9, 2024 |
| Citation | 2024 Md. Laws ch. 440 (SB 541); Md. Code Ann., Com. Law §§ 14-4601–14-4626 |
| Private right of action | No, agency enforcement only |
| Penalties | Up to $10,000 per violation; $25,000 per subsequent; 60-day cure period |
| Topics | consumer data privacy · data retention · automated decision-making · consumer protection |
| Bill text | Maryland SB 541 — Maryland Online Data Privacy Act |
More AI rules in Maryland
- MD HB 1339 (Automated Decision Systems, 2026) · In effect
- Maryland AI Ready Schools Act, SB 720 (2026) · In effect
- Maryland EO 01.01.2026.16 data center framework (2026) · In effect
- MD NCII Deepfake Law · In effect
- Maryland CSAM Law (computer-generated images) · In effect
- Maryland AI Governance Act (2024) · In effect
Related consumer data privacy rules elsewhere
- Vermont Data Broker Law (H.211) · Enacted (not yet in effect)
- Chatrie v. United States (Fourth Amendment protection for location… · Blocked / in litigation
- House Bill 2512 — Banning surveillance pricing by rideshare companies · Proposed / pending
- Kids Internet and Digital Safety Act (KIDS Act) (H.R. 7757) · Proposed / pending
- Maine LD 61 (employer surveillance disclosure & prohibition) · In effect
- Washington SHB 1672 (employee monitoring notice, ADS restrictions, emotion AI ban) · In effect
See something wrong or out of date? Submit a correction. Every entry must carry a verifiable source.