Technology (Consumer Data Protection)

LD 1224 establishes Maine's Consumer Privacy Act, setting new rules for how businesses handle personal data of Maine residents. It requires businesses to obtain clear, affirmative consent before collecting personal data, prohibits deceptive "dark patterns" on websites, and gives consumers the right to access, correct, or delete their data. The law specifically protects children under 13 and restricts the use of biometric data (like fingerprints or facial scans), while exempting health data covered under federal law. It applies to businesses operating in Maine that process data of Maine residents, excluding data handled in employment or commercial contexts.

LD 1088, the Maine Consumer Data Privacy Act, requires businesses to obtain clear, explicit consent from Maine residents before collecting or processing their personal data. The law prohibits deceptive practices (called "dark patterns") that trick people into agreeing to data collection and provides special protections for sensitive data like biometric information and health records. It also sets standards for when data can be considered de-identified (meaning it cannot be linked to an individual) and applies to businesses that handle the personal data of Maine residents. This law directly affects businesses operating in Maine and residents whose data they collect.

LD 1822, the Maine Online Data Privacy Act, gives Maine residents control over their personal data collected by businesses. It requires businesses to obtain clear, specific consent before collecting personal data (prohibiting "dark patterns" like deceptive pop-ups), allows residents to access, correct, or delete their data, and bans processing of sensitive health data - including gender-affirming and reproductive health information - without explicit consent. The law directly affects Maine residents and businesses operating in the state that handle their personal data, including those collecting biometric information. Key provisions include strict definitions of terms like "consumer" (only residents, not employees acting in work roles) and "biometric data," ensuring businesses cannot use de-identified data to re-identify individuals.

This bill (LD 595) is a concept draft proposing updates to Maine's consumer privacy laws in response to recent developments in federal and state privacy regulations. The provided context states it aims to "further update certain consumer privacy laws" but does not specify the exact provisions, mechanisms, or affected groups. As a concept draft under Joint Rule 208, it has not yet detailed concrete policy changes. The bill text contains no substantive language beyond its title and status as a draft.

This bill requires websites and apps that knowingly distribute obscene online content to verify users are 18 or older using reasonable methods, such as government ID or transactional data. Businesses must not retain any personal information after age verification is complete. It excludes bona fide news broadcasts, public interest content, and services like internet providers, search engines, or cloud hosts that don’t create the content. Violating the bill makes businesses liable for damages - including court costs and attorney fees - if a minor accesses the material, and the Attorney General can enforce it as an unfair practice.