Technology

LD 1088, the Maine Consumer Data Privacy Act, requires businesses to obtain clear, explicit consent from Maine residents before collecting or processing their personal data. The law prohibits deceptive practices (called "dark patterns") that trick people into agreeing to data collection and provides special protections for sensitive data like biometric information and health records. It also sets standards for when data can be considered de-identified (meaning it cannot be linked to an individual) and applies to businesses that handle the personal data of Maine residents. This law directly affects businesses operating in Maine and residents whose data they collect.

This bill prohibits the doxing of minors (people under 18) by making it illegal to knowingly share their personal identifying information - such as home addresses, phone numbers, or social security details - without consent when that disclosure causes stalking, physical harm, property damage, or fear for safety. It allows a minor's family member, legal guardian, or representative to file a civil lawsuit seeking damages, attorney fees, or injunctive relief if doxing occurs. The law includes enhanced penalties (treble damages) if the doxing was motivated by bias based on a minor's race, gender, disability, or other protected characteristic. Key defenses permit disclosures made to law enforcement or for constitutionally protected speech about public concerns.

LD 536, titled "An Act To Establish Net Neutrality," proposes to require internet service providers in Maine to treat all online content equally. This would prevent providers from blocking, slowing, or charging extra for specific websites or services. The bill directly affects Maine residents who use the internet and the state's internet service providers. As a concept draft, it has been referred to the Committee on Energy, Utilities and Technology for further consideration.

This bill requires websites and apps that knowingly distribute obscene online content to verify users are 18 or older using reasonable methods, such as government ID or transactional data. Businesses must not retain any personal information after age verification is complete. It excludes bona fide news broadcasts, public interest content, and services like internet providers, search engines, or cloud hosts that don’t create the content. Violating the bill makes businesses liable for damages - including court costs and attorney fees - if a minor accesses the material, and the Attorney General can enforce it as an unfair practice.

Maine's LD 919 requires public schools, public charter schools, and approved private schools to obtain written parental permission before administering any survey or questionnaire that asks for or identifies a minor student's full name. The bill directly affects schools by restricting how they collect student data and parents by requiring their explicit consent for these specific surveys. Key provisions mandate that schools cannot use such surveys without prior written permission from a parent, covering all student surveys that request full names. This policy change focuses on protecting student privacy for a specific type of data collection in educational settings.