An Act To Enact The Maine Online Data Privacy Act

LD 1822, the Maine Online Data Privacy Act, gives Maine residents control over their personal data collected by businesses. It requires businesses to obtain clear, specific consent before collecting personal data (prohibiting "dark patterns" like deceptive pop-ups), allows residents to access, correct, or delete their data, and bans processing of sensitive health data - including gender-affirming and reproductive health information - without explicit consent. The law directly affects Maine residents and businesses operating in the state that handle their personal data, including those collecting biometric information. Key provisions include strict definitions of terms like "consumer" (only residents, not employees acting in work roles) and "biometric data," ensuring businesses cannot use de-identified data to re-identify individuals.