Maryland is making history with a ban on the sale of sensitive data—even with consent—unless businesses can prove the data is integral to a specific service.
The state’s Online Data Privacy Act of 2024, which takes effect Oct. 1, is the first comprehensive state data privacy law to enact such stringent requirements to limit data that is collected and stored to what is essential, known as data minimization.
It won’t be the last. An Oregon law banning location and minor data sales goes into effect on Jan. 1, 2026, and a replica of the Maryland bill is making its way ...