Technology

LD 1088, the Maine Consumer Data Privacy Act, requires businesses to obtain clear, explicit consent from Maine residents before collecting or processing their personal data. The law prohibits deceptive practices (called "dark patterns") that trick people into agreeing to data collection and provides special protections for sensitive data like biometric information and health records. It also sets standards for when data can be considered de-identified (meaning it cannot be linked to an individual) and applies to businesses that handle the personal data of Maine residents. This law directly affects businesses operating in Maine and residents whose data they collect.

This bill prohibits the doxing of minors (people under 18) by making it illegal to knowingly share their personal identifying information - such as home addresses, phone numbers, or social security details - without consent when that disclosure causes stalking, physical harm, property damage, or fear for safety. It allows a minor's family member, legal guardian, or representative to file a civil lawsuit seeking damages, attorney fees, or injunctive relief if doxing occurs. The law includes enhanced penalties (treble damages) if the doxing was motivated by bias based on a minor's race, gender, disability, or other protected characteristic. Key defenses permit disclosures made to law enforcement or for constitutionally protected speech about public concerns.

Maine's LD 919 requires public schools, public charter schools, and approved private schools to obtain written parental permission before administering any survey or questionnaire that asks for or identifies a minor student's full name. The bill directly affects schools by restricting how they collect student data and parents by requiring their explicit consent for these specific surveys. Key provisions mandate that schools cannot use such surveys without prior written permission from a parent, covering all student surveys that request full names. This policy change focuses on protecting student privacy for a specific type of data collection in educational settings.