ME LD1088

Establishes comprehensive consumer data privacy rights effective July 1, 2026, allowing Maine residents to access, correct, delete, and obtain copies of their personal data, and to opt out of targeted advertising, data sales, and automated profiling decisions

Applies to businesses that process personal data of at least 100,000 consumers (dropping to 50,000 on January 1, 2028), or 25,000 consumers if deriving more than 25% of gross revenue from data sales

Requires consumer consent before processing sensitive data including racial/ethnic origin, religious beliefs, health information, sexual orientation, biometric data, precise geolocation, and data from children under 13

Prohibits using geofences within 1,750 feet of health care facilities to track or collect consumer health data, and mandates universal opt-out mechanisms by December 1, 2027

Enforced exclusively by the Attorney General under the Maine Unfair Trade Practices Act with 30-day notice before action; creates the Maine Privacy Fund from civil penalties to fund enforcement; repeals existing broadband privacy law