Securiti leads GigaOm's DSPM Vendor Evaluation with top ratings across technical capabilities & business value.

View
Contact Us See a demo

Maryland Online Data Privacy Act (MODPA): Compliance Requirements Beginning October 1, 2025

In this whitepaper, you will learn about:

  • Key compliance requirements for controllers and processors
  • Differences between MODPA and other state privacy laws
  • Compliance timeline, readiness checklist, and interoperability strategy
  • How Securiti helps ensure swift compliance with the MODPA

DOWNLOAD WHITE PAPER

The Maryland Online Data Privacy Act (MODPA) will go into effect on October 1, 2025. MODPA includes mandatory DPIAs that include an assessment for each algorithm used in high risk processing, Day 1 options to identify opt-out preference signals (UOOMs) or to provide a prominent on-site opt-out link, strong sensitive data controls, including a ban on selling sensitive data, lower applicability thresholds, a prescriptive data minimization rule tied to the consumer requested product or service, and minor protections (under the age of 18) using a "knew or should have known" standard.

The MODPA empowers data subjects with the right to access, correct, delete, portability, transparency regarding processors, and opt-out of targeted ads, sale, and profiling in furtherance of certain solely automated decisions with legal/similarly significant effects.

The Maryland Attorney General enforces the MODPA. A 60-day cure period is available for an alleged violation that occurs on or before April 1, 2027.

Download Whitepaper
Maryland Online Data Privacy Act (MODPA)

Award-winning technology, built by a proven team, backed by confidence. Learn more.

Frequently Asked Questions (FAQs)

The Maryland Online Data Privacy Act (MODPA), a groundbreaking online data privacy law, aims to enhance data privacy rights for Maryland residents. Also known as Senate Bill 541 (SB 541), the MODPA introduces several obligations for data handlers and empowers Maryland residents with data subject rights.

Yes, under minor protections (under the age of 18 years), no targeted advertising or sale of personal data of consumers under the age of 18 can occur where the organization “knew or should have known their age.”

Contracts must include processing instructions, purpose, data type, duration, and mutual responsibilities. Processors must also comply with reasonable assessments, help with consumer rights and breach reports, erase or return data at the end of service, ensure confidentiality and suitable security, and discontinue processing upon the controller's request.

All-in-One Solution For Your Business Needs

The Multi-disciplinary practice to grow trust-equity of your brand and comply with privacy regulations

Retail Data & AI: A DSPM Playbook for Secure Innovation View More

Retail Data & AI: A DSPM Playbook for Secure Innovation

The resource guide discusses the data security challenges in the Retail sector, the real-world risk scenarios retail businesses face and how DSPM can play a significant role in enabling safe use of data and AI.

The Healthcare Data & AI Security Playbook View More

The Healthcare Data & AI Security Playbook

Practical blueprint to secure PHI and AI workloads—discover and classify data across EHRs and clouds, enforce least privilege, de-identify/tokenize, monitor risk, and meet HIPAA/FHIR requirements.

Energy Data & AI: A DSPM Playbook for Secure Innovation View More

Energy Data & AI: A DSPM Playbook for Secure Innovation

The whitepaper highlights the critical data security challenges and risks associated with the Energy sector, the real-world risk scenarios, and how DSPM can help.

Healthcare Data & AI: A DSPM Playbook for Secure Innovation View More

Healthcare Data & AI: A DSPM Playbook for Secure Innovation

The whitepaper offers real-world risk scenarios that the Healthcare services face when using data to power AI and how a robust DSPM solution can help them to enable the safe use of data and AI.

Age-Estimation and VPC Methods View More

Age-Estimation and VPC Methods

Access the whitepaper to explore laws, EDPB guidance, EU recommendations, and global methods for age screening and obtaining verifiable parental consent (VPC).

Telecom Data & AI View More

Telecom Data & AI: A DSPM Playbook for Secure Innovation

The whitepaper discusses the data security challenges telecom service providers face, the real-world risk scenarios, and how DSPM can help protect data and AI.

A Compliance Primer For The AI Act’s GPAI Code Of Practice View More

A Compliance Primer For The AI Act’s GPAI Code Of Practice

Securiti's latest whitepaper provides a detailed overview of the GPAI Code of Practice issued to help organizations meet their legal obligations per the AI Act.

View More

The Rise of AI in Financial Institutions: Realignment of Risk & Reward

Learn how AI is transforming financial institutions by reshaping risk management, regulatory compliance, and growth opportunities. Learn how organizations can realign risk and reward with responsible AI adoption.

Redefining Data Privacy Careers in the Age of AI View More

Redefining Data Privacy Careers in the Age of AI

Securiti's whitepaper provides a detailed overview of the impact AI is poised to have on data privacy jobs and what it means for professionals in this industry.

View More

Financial Data & AI: A DSPM Playbook for Secure Innovation

Learn how financial institutions can secure sensitive data and AI with DSPM. Explore real-world risks, DORA compliance, responsible AI, and strategies to strengthen cyber resilience and regulatory trust.

Please enter a minimum of 3 characters to begin your search.
Videos
View More
January 20, 2025
Mitigating OWASP Top 10 for LLM Applications 2025
Generative AI (GenAI) has transformed how enterprises operate, scale, and grow. There’s an AI application for every purpose, from increasing employee productivity to streamlining...
View More
January 15, 2025
Top 6 DSPM Use Cases
With the advent of Generative AI (GenAI), data has become more dynamic. New data is generated faster than ever, transmitted to various systems, applications,...
View More
January 2, 2025
Colorado Privacy Act (CPA)
What is the Colorado Privacy Act? The CPA is a comprehensive privacy law signed on July 7, 2021. It established new standards for personal...
View More
December 24, 2024
Securiti for Copilot in SaaS
Accelerate Copilot Adoption Securely & Confidently Organizations are eager to adopt Microsoft 365 Copilot for increased productivity and efficiency. However, security concerns like data...
View More
November 1, 2024
Top 10 Considerations for Safely Using Unstructured Data with GenAI
A staggering 90% of an organization's data is unstructured. This data is rapidly being used to fuel GenAI applications like chatbots and AI search....
View More
October 29, 2024
Gencore AI: Building Safe, Enterprise-grade AI Systems in Minutes
As enterprises adopt generative AI, data and AI teams face numerous hurdles: securely connecting unstructured and structured data sources, maintaining proper controls and governance,...
View More
August 12, 2024
Navigating CPRA: Key Insights for Businesses
What is CPRA? The California Privacy Rights Act (CPRA) is California's state legislation aimed at protecting residents' digital privacy. It became effective on January...
View More
June 3, 2024
Navigating the Shift: Transitioning to PCI DSS v4.0
What is PCI DSS? PCI DSS (Payment Card Industry Data Security Standard) is a set of security standards to ensure safe processing, storage, and...
View More
January 29, 2024
Securing Data+AI : Playbook for Trust, Risk, and Security Management (TRiSM)
AI's growing security risks have 48% of global CISOs alarmed. Join this keynote to learn about a practical playbook for enabling AI Trust, Risk,...
AWS Startup Showcase Cybersecurity Governance With Generative AI View More
October 17, 2023
AWS Startup Showcase Cybersecurity Governance With Generative AI
Balancing Innovation and Governance with Generative AI Generative AI has the potential to disrupt all aspects of business, with powerful new capabilities. However, with...

Spotlight Talks

Spotlight 11:29
Not Hype — Dye & Durham’s Analytics Head Shows What AI at Work Really Looks Like
Not Hype — Dye & Durham’s Analytics Head Shows What AI at Work Really Looks Like
Watch Now View
Spotlight 11:18
Rewiring Real Estate Finance — How Walker & Dunlop Is Giving Its $135B Portfolio a Data-First Refresh
Watch Now View
Spotlight 13:38
Accelerating Miracles — How Sanofi is Embedding AI to Significantly Reduce Drug Development Timelines
Sanofi Thumbnail
Watch Now View
Spotlight 10:35
There’s Been a Material Shift in the Data Center of Gravity
Watch Now View
Spotlight 14:21
AI Governance Is Much More than Technology Risk Mitigation
AI Governance Is Much More than Technology Risk Mitigation
Watch Now View
Spotlight 12:!3
You Can’t Build Pipelines, Warehouses, or AI Platforms Without Business Knowledge
Watch Now View
Spotlight 47:42
Cybersecurity – Where Leaders are Buying, Building, and Partnering
Rehan Jalil
Watch Now View
Spotlight 27:29
Building Safe AI with Databricks and Gencore
Rehan Jalil
Watch Now View
Spotlight 46:02
Building Safe Enterprise AI: A Practical Roadmap
Watch Now View
Spotlight 13:32
Ensuring Solid Governance Is Like Squeezing Jello
Watch Now View
Latest
View More
September 30, 2025
Securiti and Databricks: Putting Sensitive Data Intelligence at the Heart of Modern Cybersecurity
Securiti is thrilled to partner with Databricks to extend Databricks Data Intelligence for Cybersecurity. This collaboration marks a pivotal moment for enterprise security, bringing...
Shrink The Blast Radius: Automate Data Minimization with DSPM View More
August 27, 2025
Shrink The Blast Radius
Recently, DaVita disclosed a ransomware incident that ultimately impacted about 2.7 million people, and it’s already booked $13.5M in related costs this quarter. Healthcare...
View More
October 7, 2025
All You Need to Know About Ontario’s Personal Health Information Protection Act 2004
Here’s what you need to know about Ontario’s Personal Health Information Protection Act of 2004 to ensure effective compliance with it.
View More
September 25, 2025
What is Trustworthy AI? Your Comprehensive Guide
Learn what Trustworthy AI means, the principles behind building reliable AI systems, its importance, and how organizations can implement it effectively.
Maryland Online Data Privacy Act (MODPA) View More
October 6, 2025
Maryland Online Data Privacy Act (MODPA): Compliance Requirements Beginning October 1, 2025
Access the whitepaper to discover the compliance requirements under the Maryland Online Data Privacy Act (MODPA). Learn how Securiti helps ensure swift compliance.
Retail Data & AI: A DSPM Playbook for Secure Innovation View More
September 30, 2025
Retail Data & AI: A DSPM Playbook for Secure Innovation
The resource guide discusses the data security challenges in the Retail sector, the real-world risk scenarios retail businesses face and how DSPM can play...
DSPM vs Legacy Security Tools: Filling the Data Security Gap View More
September 30, 2025
DSPM vs Legacy Security Tools: Filling the Data Security Gap
The infographic discusses why and where legacy security tools fall short, and how a DSPM tool can make organizations’ investments smarter and more secure.
Operationalizing DSPM: 12 Must-Dos for Data & AI Security View More
September 22, 2025
Operationalizing DSPM: 12 Must-Dos for Data & AI Security
A practical checklist to operationalize DSPM—12 must-dos covering discovery, classification, lineage, least-privilege, DLP, encryption/keys, policy-as-code, monitoring, and automated remediation.
The DSPM Architect’s Handbook View More
June 16, 2025
The DSPM Architect’s Handbook: Building an Enterprise-Ready Data+AI Security Program
Get certified in DSPM. Learn to architect a DSPM solution, operationalize data and AI security, apply enterprise best practices, and enable secure AI adoption...
Gencore AI and Amazon Bedrock View More
January 7, 2025
Building Enterprise-Grade AI with Gencore AI and Amazon Bedrock
Learn how to build secure enterprise AI copilots with Amazon Bedrock models, protect AI interactions with LLM Firewalls, and apply OWASP Top 10 LLM...
What's
New