<h2>Deadline: 2026-04-01</h2><p><strong>30 days remaining</strong> until the Maryland Online Data Privacy Act - Enforcement Begins deadline.</p><h3>Overview</h3><p>Enforcement begins for MODPA. Notably stricter than most state privacy laws: requires data minimization (only collect data reasonably necessary), prohibits sale of sensitive data outright regardless of consent, and requires data protection assessments for high-risk processing.</p><h3>Requirements Checklist</h3><ul><li>Implement strict data minimization practices</li><li>Cease sale of sensitive data regardless of consent</li><li>Conduct data protection assessments for high-risk processing</li><li>Update data collection practices to necessary-only standard</li><li>Review and update privacy notices for MODPA compliance</li></ul><h3>Penalty for Non-Compliance</h3><p>Civil penalties up to $10,000 for first violation, $25,000 for subsequent violations. 60-day cure period. Enforced by Maryland Attorney General.</p><h3>Who This Applies To</h3><ul><li>Organizations processing data of 35K+ Maryland consumers</li><li>Data-selling businesses targeting 10K+ Maryland consumers</li></ul>