Maryland Data Removal Guide (2026)
Maryland's Online Data Privacy Act took effect October 2025 and is widely regarded as the most consumer-friendly comprehensive state privacy law. It imposes hard data-minimization limits, heightened protections for minors, and an outright ban on the sale of sensitive data.
At a glance
- Comprehensive state privacy law
- Yes — MODPA
- Broker response deadline
- 45 days from verifiable request
- Enforcement
- Maryland Office of the Attorney General
- Residents
- 6.2M (approx.)
Maryland Online Data Privacy Act (MODPA)
MODPA applies to controllers processing data of 35,000+ Maryland consumers or 10,000+ while selling data — lower thresholds than peer laws. It prohibits the sale of sensitive personal data outright, caps data collection to what is "reasonably necessary and proportionate", and adds heightened protections for consumers under 18. No cure period. AG enforcement with civil penalties up to $10,000 per violation, $25,000 per subsequent violation.
Your rights
- →Outright ban on sale of sensitive personal data
- →Strict data-minimization requirement
- →Heightened protections for minors
- →Low thresholds — more brokers are in scope
- →No cure period
Where your data leaks from in Maryland
Data brokers don\u2019t guess your address \u2014 they scrape specific public-record sources. The ones most relevant in Maryland:
- Maryland Judiciary Case Search (MDEC)
- Montgomery, Prince George's, Baltimore County property records
- Maryland MVA driver records
Ready to remove
Opt out of 200+ brokers for $2
OfflistMe drafts a legally compliant deletion email citing MODPA for every broker. You send from your own inbox. No account, no ID upload.
Start for $2 \u2192If a broker ignores your request
If a broker does not respond within 45 days, file a complaint with the Maryland Office of the Attorney General. The enforcement authority can assess civil penalties and compel compliance.
File a complaint with Maryland Office of the Attorney General \u2197FAQ: Maryland data removal
Why is Maryland's MODPA considered the strictest state law?+
Three features: (1) outright ban on selling sensitive personal data, no exceptions; (2) data minimization must be "reasonably necessary and proportionate" — not just disclosed; (3) low consumer thresholds mean MODPA applies to smaller brokers that escape other state laws. Combined, it narrows the gap between state and EU GDPR protections.