Preparing for enforcement and beyond
In the final part of our series on the Maryland Online Data Privacy Act (MODPA), we look ahead to enforcement and beyond. With MODPA taking effect on Oct. 1, 2025, and enforcement beginning April 1, 2026, businesses must not only prepare for implementation but also build sustainable privacy programs that will stand the test of time.
While initial implementation demands immediate attention, the law’s long-term success requires businesses to think beyond one-time fixes and focus on building adaptive, sustainable privacy programs that evolve with regulatory expectations and business growth. As enforcement begins and cure periods expire, companies must prepare for a privacy landscape where continuous compliance monitoring, regular program updates, and proactive risk management become standard business practices.
Throughout this series, we’ve examined the basic requirements of MODPA and looked closely at the changes needed for core business operations:
Violations of the law can cost companies between $10,000 and $25,000 per violation, while eroding consumer confidence in the safety of their information. Given the complexity of evolving privacy regulations and the financial and reputational consequences of noncompliance, many organizations find that investing in specialized expertise proves invaluable for navigating challenging regulatory waters and protecting their long-term interests.
This article was co-authored by Caroline Aiello.
A serial pro se litigant, Vivek Shah, has sent demand letters threatening litigation to thousands of businesses across the country, alleging violations of the California Invasion of Privacy Act (CIPA). If your business has received one of these letters, here is what you need to know. Key takeaways: Understanding CIPA and the demand letters In […]
Data privacy and security attorney Kayla Bushey presented on an IAPP panel discussion on August 4, exploring the risks and uncertainties of U.S. data privacy litigation. She was joined by William Simpson of IAPP and Matt Pearson of Frankfurt Kurnit Klein & Selz PC, where they discussed private litigation trends in the data privacy realm, […]
The following guidance addresses a matter of increasing importance to school entities across Pennsylvania. Artificial intelligence tools such as ChatGPT, Microsoft Copilot, Google Gemini, and similar generative AI platforms have become increasingly common in both legal and business settings, and we understand the appeal of using them to quickly research issues, draft documents, or think […]
In early May, thousands of K-12 schools, colleges, and universities were disrupted when Canvas, a leading edtech software program, went offline during one of the busiest times of the academic year. The digital blackout was the result of a cyberattack. Instructure, Canvas’s parent company, soon after paid an undisclosed (but presumably substantial) amount to a […]
Receive legal perspectives, blog posts and invitations to upcoming events from McNees. Follow the topics that interest you and the developments affecting your business and industry.
