Maryland & Oregon Privacy Law Changes
Changes that affect the use of location data
Short, practical answers for DMOs that analyze visitor flows or and campaign performance using location data.
What exactly changed in Maryland and Oregon and when do the new rules take effect?
Maryland: The Maryland Online Data Privacy Act (MDODPA) was signed in May 2024. Key parts of the law take effect October 1, 2025. MD’s law adds stringent rules on data minimization, special protections for sensitive categories and minors, and new consumer rights (access, deletion, opt-outs).
Oregon: The Oregon Consumer Privacy Act (OCPA) went into effect for many businesses on July 1, 2024 and has been amended in 2025; the amendments expand protections and include specific prohibitions affecting location data. Notably, some amendments prohibit the sale of certain precise location data and add extra protections for minors; those provisions are staged to start January 1, 2026.
