Maine
Privacy Law Status
Comprehensive Privacy Law
Maine currently does not have a comprehensive consumer data privacy law in effect[1][2]. However, the state does maintain a specific privacy law for internet service providers, passed in 2019, called “An Act to Protect the Privacy of Online Customer Information”[3][4]. This law requires broadband internet providers to obtain opt-in consent before using, disclosing, or selling customer personal information, including web browsing history and location data[5].
The most promising comprehensive privacy legislation currently under consideration is LD 1822, the Maine Online Data Privacy Act, which received a divided committee report in May 2025[6]. Privacy advocates have praised this bill as potentially providing some of the strongest consumer protections in the nation[7][8].
Legislative Activity
Maine’s legislature has been actively working on comprehensive privacy legislation since 2023. In 2024, a previous attempt called the Maine Data Privacy and Protection Act (LD 1977) passed the House of Representatives but failed in the Senate by a narrow 15-18 vote[1][2]. This bill was modeled after federal privacy legislation and included strong data minimization provisions.
During the 2025 legislative session, three different privacy bills were introduced: LD 1822, LD 1088, and LD 1224[9]. LD 1088 and LD 1224 have been tabled or voted “ought not to pass,” while LD 1822 remains active with a divided committee report as of May 30, 2025[9][6].
Implementation Timeline
If LD 1822 becomes law, it would take effect on July 1, 2026, with a phased approach for business compliance[10]. From July 2026 to December 2027, the law would apply to businesses processing data from at least 100,000 consumers or 25,000 consumers while deriving over 25% of revenue from data sales. Starting January 1, 2028, the threshold would lower to businesses processing data from at least 50,000 consumers[10].
The current ISP privacy law has been in effect since July 1, 2020, and applies immediately to all broadband internet service providers operating in Maine[4][5].
Your Rights as a Maine Resident
Under Maine’s existing ISP privacy law, residents have limited but important protections when dealing with internet service providers. If the proposed LD 1822 becomes law, Maine residents would gain comprehensive digital privacy rights.
- Right to know what data is collected: You would have the right to confirm whether a business is processing your personal information and access details about what data they collect and how it’s used
- Right to delete personal information: You could request that businesses delete your personal data, with certain exceptions for legitimate business needs
- Right to opt out of data sales: You would have the right to prevent businesses from selling your personal information to third parties
- Right to correct inaccurate data: You could request that businesses fix incorrect personal information they have about you
- Right to non-discrimination: Businesses couldn’t refuse service, charge different prices, or provide different service quality solely because you exercised your privacy rights
- Special protections for sensitive data: Enhanced consent requirements would apply to biometric data, health information, and precise location data
Currently, these comprehensive rights only exist for broadband internet customers under Maine’s ISP privacy law, which requires opt-in consent before providers can use or sell your browsing history and personal information[5].
Business Requirements
- Data minimization obligations: Under LD 1822, businesses would be required to collect only personal data that is reasonably necessary to provide the specific service requested by consumers[7][8]
- Consent requirements: Companies would need opt-in consent before processing sensitive data like biometric information, health data, and precise geolocation[8]
- Transparency and notice: Businesses would be required to provide clear privacy notices explaining their data collection and use practices
- Consumer request response procedures: Companies would have specific timeframes to respond to consumer requests for data access, deletion, or correction
- Risk assessments: Businesses would need to conduct formal assessments of their data processing activities that present heightened risk of harm to consumers[8]
- Security measures: Companies would be required to implement reasonable data security practices and provide breach notifications when incidents occur[11]
- Children’s privacy protections: Special restrictions would apply to targeted advertising to minors and the sale of children’s data[7][8]
Practical Impact
- Current limited protections: Right now, Maine residents only have privacy protections when dealing with their internet service providers, who must get permission before using browsing history or personal data for other purposes[5]
- Potential comprehensive coverage: If LD 1822 passes, residents would gain privacy rights across most online services, social media platforms, and digital businesses that collect substantial amounts of personal data
- Enforcement limitations: The proposed law would be enforced primarily by the Maine Attorney General’s office, with limited private right of action only for violations involving sensitive data[8]
- Reporting violations: Residents can currently file complaints with the Maine Attorney General’s Consumer Protection Division for privacy-related issues, though enforcement options are limited without comprehensive legislation[12][13]
- Business compliance gaps: Until comprehensive legislation passes, most businesses can collect and use personal data with minimal restrictions beyond existing federal laws and their own privacy policies
Comparison Context
- Leading privacy states: If enacted, LD 1822 would place Maine among states with the strongest privacy protections, potentially earning an “A” grade from privacy advocacy groups, unlike most existing state privacy laws[14]
- Data minimization advantages: The proposed Maine law includes stronger data minimization provisions than many other states, requiring businesses to justify data collection rather than simply disclosing it in privacy policies[8]
- Sensitive data protections: Maine’s approach to sensitive data would be more restrictive than some states, requiring that collection be “strictly necessary” rather than just having opt-out rights[7]
- Civil rights integration: LD 1822 would extend civil rights protections to digital spaces by prohibiting discriminatory data processing based on race, religion, sexual orientation, and other protected characteristics[8]
- ISP privacy leadership: Maine was already a pioneer in ISP privacy protections, being the first state to legally restrict how internet providers can use customer data[14][4]
Action Steps for Residents
- Contact your legislators: Reach out to your state representatives and senators to express your views on privacy legislation, particularly regarding the status of LD 1822
- Review ISP privacy settings: Check with your internet service provider about their privacy practices and ensure you understand how your browsing data is being used under Maine’s existing ISP law
- Stay informed on legislative progress: Monitor the status of privacy bills through the Maine Legislature’s website and committee hearing schedules
- Exercise existing rights: Use available privacy controls on websites and apps, even though comprehensive legal protections may be limited
- Report privacy violations: File complaints with the Maine Attorney General’s Consumer Protection Division if you believe businesses are mishandling your personal information
- Participate in public comment: Attend legislative hearings or submit written testimony when privacy bills are being considered by the Judiciary Committee
Official Resources and Contact Information
Maine State Legislature
Contact your representatives about privacy legislation and track bill progress through the official legislative website. The Maine Legislature can be reached at legislature.maine.gov for bill tracking and committee information[15]. To find your specific legislators by address, visit the legislature’s contact page.
For general legislative inquiries:
House of Representatives: Call 1-800-423-2900 or write to 2 State House Station, Augusta, ME 04333-0002[16][15]
Senate: Call 1-800-423-6900 or write to 3 State House Station, Augusta, ME 04333-0003[16][15]
Maine Attorney General – Consumer Protection
The Attorney General’s office handles consumer privacy complaints and enforces existing privacy laws. Contact information:
Phone: 207-626-8800
Consumer complaints: 207-626-8849 or toll-free 1-800-436-2131
Mailing address: 6 State House Station, Augusta, ME 04333
Email: attorney.general@maine.gov
For consumer complaints and privacy violation reports, visit maine.gov/ag/consumer[17][12][13]
Legislative Committee Contact
Privacy legislation is typically handled by the Joint Standing Committee on the Judiciary. Committee materials and hearing schedules can be found through the legislature’s website[18]. Contact the Office of Policy and Legal Analysis at (207) 287-1670 for committee information[18].
Finding Your Representatives
To identify your specific state senator and representative, use the Maine Legislature’s district lookup tool at legislature.maine.gov/house/house/MemberProfiles/ContactYourLegislator[16]. You can also contact the Clerk of the House at (207) 287-1400 or the Secretary of the Senate at (207) 287-1540 for assistance in reaching your legislators[15].
Sources and Citations
Last Updated August 2025. Written with contributions from both human authors and Perplexity AI. If you find incorrect or outdated information let us know at support@optery.com.