Privacy laws to change for some Americans on October 1

The state of Maryland in the United States will begin enforcing its Online Data Privacy Act of 2024 on October 1, imposing stricter limits on how companies collect, process, and sell consumer information.

The law, signed by Governor Wes Moore last year, introduces one of the most stringent state-level privacy frameworks in the United States.

It grants residents new rights over their data, including access, deletion and the ability to opt out of targeted advertising.

David Turner, Senior Advisor and Communications Director for Governor Moore, told Newsweek the measure “puts common sense consumer protections in place around large businesses that handle millions of Marylanders’ personal and biometric data, providing clear and transparent methods to manage the sharing of their personal information.”

He added, “Its passage creates steps to greater protections in the absence of meaningful action at the federal level.”

MODPA prohibits the sale of personal data when companies know, or should know, the consumer is under 18.

It also restricts the handling of sensitive information, moving away from the traditional opt-in model. Enforcement authority lies with the Maryland Attorney General.

The law applies to businesses targeting Maryland residents that process data from at least 35,000 consumers, or from 10,000 consumers if more than 20 percent of their revenue comes from data sales.

Privacy advocates and legal experts say Maryland’s move reflects a growing state-level response to concerns about personal data exploitation.

International law firm Perkins Coie noted in a post on X that the law ranks among “the most stringent to date,” urging businesses to prepare for compliance.

The legislation makes Maryland the 17th state to enact comprehensive consumer privacy protections. Massachusetts lawmakers recently advanced a similar measure, while Oregon’s Consumer Privacy Act will take effect in January 2026.

Turner said the new framework underscores Maryland’s intent to safeguard its citizens in a digital economy increasingly shaped by data-driven commerce.