LD1088

Maine Consumer Data Privacy Act regulates personal data collection and processing by businesses.

The Maine Consumer Data Privacy Act establishes rules for businesses handling personal data of Maine residents. It defines terms like "controller," "processor," and "personal data." Controllers must limit data collection to what is necessary for disclosed purposes, process data only for those purposes, and allow consumers to access, correct, or delete their data. The Act prohibits processing sensitive data without consent and requires data protection assessments for activities like targeted advertising and data sales. It also mandates privacy notices and opt-out mechanisms for consumers.