Your Maryland consumer data rights
In effect
The Maryland Online Data Privacy Act gives Maryland residents rights over the personal data that covered businesses and nonprofits collect about them. It has been in effect since October 1, 2025.
- Who or what it protects
- Maryland residents acting as individuals or households, not in a job context, in their dealings with businesses and nonprofits that work in Maryland or serve its residents and that handled the data of at least 35,000 Marylanders last year, or of at least 10,000 while making more than 20 percent of their revenue from selling personal data. Government is not covered, and financial institutions covered by federal banking privacy law are exempt.
- What you can do
- You can confirm whether a business processes your personal data and see it, correct it, delete data you provided or that it obtained about you, unless the law requires it to keep it, and get a copy you can take elsewhere. You can get a list of the categories of third parties it disclosed your data to. You can opt out of targeted advertising, the sale of your data, and solely automated profiling with legal or similarly significant effects. A business cannot sell your sensitive data. Use the method in the company's privacy notice; your first request in 12 months is free. If a business denies your request, you can appeal as its notice explains.
- Limits and eligibility
- The Maryland Attorney General enforces the law. A business can say no to a request only for specific reasons, such as preventing fraud or following other laws.
- Who oversees it
- Maryland Attorney General
- The law
- Maryland Online Data Privacy Act
More official places to go
Checked against the official sources on October 6, 2026. Links last checked November 1, 2026.