Skip to content

Session Expired

Your session has expired. Please sign in again to continue where you left off.

Sign In Again

ME LD1822: An Act to Enact the Maine Online Data Privacy Act

Dead/Failed Maine

Last verified Oct 10, 2026 · official bill text

LD1822 · where it stands

This bill did not become law (dead/failed) · last action Apr 13, 2026.

What do these statuses mean?
Introduced
Filed in the legislature; may be waiting for a committee hearing.
Passed a chamber
Approved by one or both chambers; awaiting further action.
Enacted
Signed into law, or became law without a signature or over a veto.
Effective date
The date the law says it takes effect. Once it has passed, the page shows "Effective" and the date. A court order can still block a law; if we know of one, the summary says so.
Dead / vetoed
Vetoed, failed, or the session ended without action.

In one paragraph

Not law. Maine's LD 1822, the Maine Online Data Privacy Act, as introduced would have applied to controllers handling data of 35,000 or more consumers (or 10,000 with over 20% of gross revenue from data sales). Consumers could have accessed, corrected and deleted data and opted out of targeted advertising, sales and profiling in furtherance of solely automated decisions with legal or similarly significant effects. It would have banned selling sensitive data and required data protection assessments, including for risky profiling. Committee amendment C-A and later floor amendments were adopted. The Attorney General would have enforced it exclusively. It died between houses April 13, 2026.

Plain-English summary, written with AI assistance. The official text controls.

What it means for business

None: the bill died, so it creates no obligations in Maine.

Key provisions

  1. Applies to controllers handling data of at least 35,000 consumers, or 10,000 consumers with more than 20% of gross revenue from data sales (§9603)
  2. Opt out of targeted advertising, sales and profiling in furtherance of solely automated decisions with legal or similarly significant effects (§9606(1)(G))
  3. Sensitive data collected or processed only if strictly necessary; sensitive data may not be sold; added limits where the controller knows or reasonably should know the consumer is a minor (§9608)
  4. Data protection assessments, including for profiling that presents a reasonably foreseeable risk of harm and, as introduced, for each algorithm used (§9611)
  5. Exclusive Attorney General enforcement; 60-day cure for violations on or before April 1, 2027 (§9614)
  6. Committee amendment C-A (adopted) moved the effective date from July 1, 2026 to September 1, 2026 and removed the per-algorithm assessment
  7. Judiciary divided report June 13, 2025; Died Between Houses April 13, 2026

Latest legislative action

Apr 13, 2026. Died Between Houses

Sponsors (showing 5 of 25)

NameRole
D Primary
Primary
Primary
D Primary
Primary

Roll call votes (showing 3 of 13)

RECEDE Mar 30, 2026

14 yea19 nay2 other

INDEFINITELY POSTPONE Mar 30, 2026

14 yea19 nay2 other

Table Motion: UNTIL LATER Mar 30, 2026

14 yea19 nay2 other

Topics and industries

Affected industries

This page is general information, not legal advice. Summaries are AI-assisted and may contain errors; read the statute for the controlling text and talk to a lawyer about your situation. Full disclaimer · Report an error