<ul><li>Maryland is leading the way with the Maryland Online Data Privacy Act, focusing on limited data collection which has created uncertainty among businesses.</li><li>The Act mandates data minimization, requiring businesses to collect only data that is necessary for their stated purposes, with stricter requirements for sensitive data.</li><li>Additional requirements include a ban on the sale of sensitive data without explicit consent, and limited data retention beyond the necessary period.</li><li>Businesses are facing challenges in compliance with the shift towards data minimization, with concerns especially raised by companies using generative artificial intelligence that rely on large datasets.</li></ul>

State Data Minimization Laws Spark Compliance Uncertainty

Discover more