The Maryland Online Data Privacy Act (MODPA) introduces some of the most comprehensive state-level privacy requirements in the country. Effective October 1, 2025, with enforcement beginning in April 2026, MODPA significantly expands the obligations for businesses that collect or process the personal data of Maryland residents. If your organization falls under these thresholds, early preparation is critical.
To help you get started, we have created a MODPA risk assessment checklist. This resource offers a clear, actionable framework for identifying high-risk activities, documenting mitigation strategies, and demonstrating good-faith compliance. It covers essential activities that regulators will scrutinize closely, such as targeted advertising, handling sensitive data, and automated decision-making.
MODPA surpasses other state privacy laws by imposing stringent standards for sensitive data, prohibiting the sale of such data, and implementing enhanced protections for minors. It also requires documented risk assessments for profiling and algorithmic decision-making. These obligations aren’t just legal requirements. They are an opportunity to strengthen consumer trust and reduce regulatory risk.
Do not wait until enforcement begins. Download the checklist today to audit your current practices, update policies, train your team, and establish monitoring for new high-risk activities. Taking these steps now will help you avoid penalties and position your organization as a leader in privacy compliance.
A serial pro se litigant, Vivek Shah, has sent demand letters threatening litigation to thousands of businesses across the country, alleging violations of the California Invasion of Privacy Act (CIPA). If your business has received one of these letters, here is what you need to know. Key takeaways: Understanding CIPA and the demand letters In […]
Data privacy and security attorney Kayla Bushey presented on an IAPP panel discussion on August 4, exploring the risks and uncertainties of U.S. data privacy litigation. She was joined by William Simpson of IAPP and Matt Pearson of Frankfurt Kurnit Klein & Selz PC, where they discussed private litigation trends in the data privacy realm, […]
The following guidance addresses a matter of increasing importance to school entities across Pennsylvania. Artificial intelligence tools such as ChatGPT, Microsoft Copilot, Google Gemini, and similar generative AI platforms have become increasingly common in both legal and business settings, and we understand the appeal of using them to quickly research issues, draft documents, or think […]
In early May, thousands of K-12 schools, colleges, and universities were disrupted when Canvas, a leading edtech software program, went offline during one of the busiest times of the academic year. The digital blackout was the result of a cyberattack. Instructure, Canvas’s parent company, soon after paid an undisclosed (but presumably substantial) amount to a […]
Receive legal perspectives, blog posts and invitations to upcoming events from McNees. Follow the topics that interest you and the developments affecting your business and industry.
