Privacy law in Maine

There is no comprehensive consumer privacy law currently in effect in Maine. LD 1088, the Maine Consumer Data Privacy Act (MCDPA), was introduced in the 132nd Legislature on March 18, 2025, but as of the extraction date it has not been signed into law — it remains an introduced bill referred to the Committee on Judiciary. If passed and signed, the Act would take effect July 1, 2026. Until then, Maine residents do not have a state-level comprehensive privacy law protecting their personal data held by businesses.

What protections do exist in Maine

Maine Notice of Risk to Personal Data Act

Maine requires businesses and government agencies to notify affected Maine residents when a breach of security involving their personal information occurs. Notification must also be sent to the Maine Attorney General when 1,000 or more residents are affected. (10 M.R.S.A. § 1346 et seq.)

Maine Privacy of Broadband Internet Access Service Customer Personal Information

Maine enacted a law requiring broadband internet service providers to obtain affirmative consent before using, disclosing, or selling customers' personal information. Note: LD 1088 proposes to repeal this law if the comprehensive MCDPA is enacted, as broadband providers would be covered under the new Act. (35-A M.R.S.A. c. 94)

Maine Insurance Information and Privacy Protection Act

This law governs the collection, use, and disclosure of personal information gathered by insurance companies doing business in Maine, giving consumers rights to access and correct their insurance records. (24-A M.R.S.A. § 2201 et seq.)

Federal protections that apply to Maine residents

Even without a state comprehensive privacy law, federal protections apply to Maine residents. The FTC can take action against companies that engage in unfair or deceptive privacy practices under Section 5 of the FTC Act. HIPAA protects your medical information held by health care providers and insurers. COPPA requires parental consent before websites collect personal data from children under 13. Dodd-Frank and the Gramm-Leach-Bliley Act provide some protections for your financial data held by banks and financial institutions.

What’s happening in the Maine legislature

Several privacy bills have been introduced in Maine. None has passed into law yet, but they signal where consumer privacy legislation in the state may be heading.

LD 1088 — Maine Consumer Data Privacy Act

LD 1088 would enact the Maine Consumer Data Privacy Act, giving Maine residents the right to access, correct, delete, and obtain a portable copy of their personal data, as well as the right to opt out of targeted advertising, sale of their data, and profiling for significant decisions. The bill would apply to businesses processing data of 100,000 or more Maine consumers (dropping to 50,000 after January 1, 2028), or 25,000 consumers when more than 25% of revenue comes from data sales. Enforcement would be exclusively by the Maine Attorney General under the Maine Unfair Trade Practices Act, with no private right of action. The Act would take effect July 1, 2026. Status: in committee. Read the bill text.

How Optery helps Maine residents

Data brokers collect and sell personal information about almost every American adult — home addresses, phone numbers, family relationships, employment history. They do this regardless of whether your state has a comprehensive privacy law. Optery scans over 200 data brokers to find where your information is exposed, then submits removal requests on your behalf and tracks compliance. Our service works for every US resident, not just those in states with strong privacy statutes.

See which data brokers have your information →