ME LD1224

LD 1224 - Maine Consumer Privacy Act

• Creates comprehensive privacy rights for Maine residents effective July 1, 2026, including the right to access, correct, delete, and obtain copies of personal data, plus the right to opt out of targeted advertising, data sales, and automated profiling that affects access to financial services, housing, insurance, education, employment, and healthcare

• Applies to businesses that process data of at least 100,000 Maine consumers (dropping to 50,000 on January 1, 2028), or process data of 25,000+ consumers while deriving more than 25% of gross revenue from data sales

• Requires consumer consent before processing sensitive data including racial/ethnic origin, religious beliefs, health information, sexual orientation, biometric data, precise geolocation, children's data (under 13), and crime victim status

• Mandates controllers provide clear privacy notices, establish data protection assessments for high-risk processing activities, implement reasonable data security practices, and honor universal opt-out signals by December 1, 2027

• Enforcement is exclusively through the Attorney General under the Maine Unfair Trade Practices Act with a 30-day cure period before action; no private right of action; civil penalties deposited into newly established Maine Privacy Fund