Maryland Enacts Stringent Privacy Law

Maryland has officially passed the Maryland Online Data Privacy Act, which will take effect on October 1, 2025. This new law is among the strictest in the United States, introducing high standards for the collection, processing, and sharing of personal information, especially sensitive data. It requires that businesses only handle such data when it is "strictly necessary" for providing the specific product or service requested by a user. The law also includes clear user rights and transparency obligations, continuing the nationwide trend of stronger consumer privacy protections. Businesses operating in or collecting data from Maryland residents must now reevaluate their compliance strategies accordingly.