468 articles · page 5 of 8
Luxembourg data privacy laws explained: GDPR implementation, Law of 1 August 2018, CNPD enforcement powers, the EUR 746M Amazon fine and its annulment on appeal, EU AI Act, financial sector rules, and 2024-2026 developments.
Maine bans government facial recognition, but LD 1822 failed and no comprehensive biometric privacy law exists. Learn what protections apply today.
Maine requires data breach notification within 30 days. Learn who must comply, what triggers notification, encryption safe harbors, and penalties under state law.
Complete guide to Maine data privacy laws including the ISP privacy law (35-A MRSA 9301), breach notification requirements, the pending Consumer Data Privacy Act, and employee monitoring rules.
Malaysia enforces data privacy through the PDPA 2010 (Act 709) and its 2024 amendments. Learn about JPDP enforcement, 7 data protection principles, breach notification, and penalties up to RM 1 million.
How Malaysia's PDPA differs from the GDPR: the government exemption, narrower scope, the 2024 Amendment Act, and penalties through 2025.
Malta data privacy laws: GDPR, Cap. 586, and IDPC enforcement. Covers the age-13 digital consent rule, iGaming sector compliance, EU AI Act designation, and cross-border transfer rules.
The Marlboro-Chesterfield Pathology claim window closed August 21, 2026. A final approval hearing is set for October 12, 2026; the court and Kroll post status updates.
Learn how Maryland's MODPA protects biometric data like fingerprints and retina scans. Covers the strict necessity standard, sale ban, breach rules, and AG enforcement.
Maryland requires data breach notification within 45 days. Learn about AG-first reporting, protected personal information, encryption safe harbors, and penalties.
Maryland Online Data Privacy Act (MODPA) bans selling sensitive data, limits collection to what is necessary, and protects minors under 18.
Massachusetts has no standalone biometric privacy law, but 201 CMR 17.00, Chapter 93A treble damages, and the pending Data Privacy Act (S.2608) protect biometric data.
Learn Massachusetts data breach notification rules under Chapter 93H and 201 CMR 17.00, including WISP requirements, penalties, and credit monitoring obligations.
Massachusetts data privacy laws include 201 CMR 17.00 security regulations, Chapter 93H breach notification rules, and pending comprehensive privacy legislation.
MCDPA compliance (Mont. Code Ann. 30-14-2803): applicability at 25,000/15,000 thresholds, notice, opt-in, assessments. Cure period ended October 1, 2025.
Montana's MCDPA (Mont. Code Ann. 30-14-2808) gives access, correction, deletion, portability, and opt-out rights, with a 45-day response window.
Meta agreed to pay state attorneys general at least $12.1 billion, rising to $17.1 billion, over Instagram and Facebook's design for minors. Verified against official AG releases.
Mexico replaced its 2010 data privacy law in March 2025. New LFPDPPP, INAI dissolved, SABG enforces. ARCO rights, penalties up to MXN 37.5M, AI provisions explained.
Washington MHMDA duties (ch. 19.373 RCW): separate privacy policy, consent, authorization to sell, geofencing ban, security, plus private-suit litigation risk.
Washington MHMDA (RCW 19.373.040) gives consumers rights to access, withdraw consent, and delete health data, plus a private right of action via the CPA.
Michigan protects biometric data through its Identity Theft Protection Act and Consumer Protection Act. Learn current rules, breach penalties, and pending 2026 legislation.
Michigan data breach notification law requires businesses to notify residents of security breaches involving personal information. Learn timelines, penalties, and safe harbors under MCL 445.72.
Michigan data privacy laws explained: breach notification rules, SSN protections, proposed Personal Data Privacy Act, and your rights under state and federal law.
Learn how Minnesota's MCDPA classifies biometric data as sensitive, requiring opt-in consent. Covers definitions, consumer rights, exemptions, and AG enforcement with $7,500 penalties.
Minnesota requires breach notification without unreasonable delay when names plus SSNs, driver's licenses, or financial accounts are exposed. No AG notice required.
Learn about Minnesota data privacy laws including the Consumer Data Privacy Act, breach notification rules, consumer rights, and penalties for violations.
A Minnesota MCDPA compliance checklist: thresholds, the required data inventory under 325M.18, sensitive-data opt-in, and profiling-answer duties.
Minnesota MCDPA consumer rights under Minn. Stat. 325M.14: access, delete, opt out, a third-party list, and a unique right to question profiling.
The Mission Community Hospital (Deanco Healthcare) claim window closed August 12, 2026. The final approval hearing was held September 9, 2026 and the court has not ruled.
Mississippi has no biometric privacy law. Learn how Miss. Code 75-24-29 falls short, failed BIPA-style bills, employer rules, and federal protections that apply.
Mississippi data breach notification law (Miss. Code 75-24-29) requires notice without unreasonable delay. No AG reporting required. Learn triggers, exemptions, and penalties.
Mississippi requires data breach notification under Miss. Code 75-24-29 but has no comprehensive consumer privacy law. Learn breach rules, penalties, and your rights.
Missouri has no biometric privacy law and excludes biometric data from breach notification rules. Learn current protections, pending legislation, and employer obligations.
Missouri data breach notification law (Mo. Rev. Stat. 407.1500) requires prompt notice to affected residents. Learn timelines, penalties up to $150K, and AG enforcement rules.
Missouri has no comprehensive consumer privacy law but enforces data breach notification under Mo. Rev. Stat. 407.1500. Learn about breach notification, identity theft protections, and consumer rights.
Maryland MODPA compliance: strict-necessity data minimization (Com. Law 14-4607), sensitive-data sale ban, UOOM, assessments, and penalties to $10,000.
Maryland's MODPA (Com. Law 14-4605) grants access, deletion, opt-out, and a 45-day response, plus the strictest sensitive-data and minimization protections in the US.
Montana MCDPA classifies biometric data as sensitive, requiring opt-in consent. AG-only enforcement with penalties up to $7,500 per violation. No private right of action.
Montana requires data breach notification without unreasonable delay under Mont. Code 30-14-1704. Learn who must be notified, protected data types, AG reporting rules, and penalties.
Montana Consumer Data Privacy Act (MCDPA) explained. Learn your rights to access, delete, and opt out of data sales under Mont. Code Ann. 30-14-2801, plus breach notification rules.
Morocco data protection under Law 09-08: CNDP registration rules, constitutional basis, legal bases, data subject rights, cross-border transfers, penalties, and 2025-2026 developments.
The Motility Software claim window closed August 7, 2026 and the court entered final approval on August 19, 2026. No payment date is set yet; Epiq posts status updates.
Mt. Baker Imaging and Northwest Radiologists claims closed August 19, 2026. The August 21 hearing has been held; no final approval order is posted on the official site yet.
No National Public Data breach settlement or claim form exists as of September 2026. The company's bankruptcy was dismissed. Here is what actually helps.
Nebraska NDPA compliance (Neb. Rev. Stat. 87-1103): the SBA small-business test, opt-in sensitive data, assessments, plus a permanent 30-day cure period.
Nebraska's NDPA (Neb. Rev. Stat. 87-1107) gives five rights: access, correct, delete, port, and opt out, with a 45-day response window and a 60-day appeal.
Nebraska biometric privacy laws require opt-in consent under the NDPA. Learn about definitions, penalties up to $7,500 per violation, exemptions, and breach notification rules.
Nebraska requires data breach notification without unreasonable delay under Neb. Rev. Stat. 87-801. Learn about broad PI coverage including biometrics, AG notification, and the cybersecurity safe harbor.
Nebraska Data Privacy Act (LB 1074) took effect January 1, 2025. Learn consumer rights, business obligations, penalties up to $7,500, and data breach notification rules.
Complete guide to Netherlands data privacy laws: GDPR, UAVG, Autoriteit Persoonsgegevens enforcement, Clearview AI EUR 30.5M fine, EU AI Act, breach rules, DPO requirements, and 2024-2026 developments.
Nevada lacks a standalone biometric privacy law but protects health-related biometric data under NRS 603A. Learn about consent rules, sale bans, and enforcement.
Nevada's consumer health data law (SB 370, NRS ch. 603A) took effect March 31, 2024, bans geofencing within 1,750 feet of clinics, and has no private right of action.
Nevada requires data breach notification without unreasonable delay under NRS 603A. Learn about protected data types, PCI DSS mandate, no AG notification requirement, and the encryption safe harbor.
Complete guide to Nevada data privacy laws including SB 220 opt-out rights, NRS 603A breach notification rules, consumer health data protections, and enforcement penalties.
New Hampshire classifies biometric data as sensitive under RSA 507-H (effective Jan 2025). Learn about consent rules, penalties up to $10,000, and the Data Privacy Unit.
New Hampshire requires data breach notification as quickly as possible under RSA 359-C:20. Learn about AG pre-notification, the $5,000 substitute notice threshold, CRA reporting, and penalties.
Learn about New Hampshire data privacy laws including the NH Privacy Act (RSA 507-H), consumer rights, business obligations, penalties up to $10,000 per violation, and breach notification rules.
New Jersey biometric privacy law under the NJDPA requires consent before collecting fingerprints, facial geometry, or voiceprints. Learn the rules, penalties, and your rights.
New Jersey requires data breach notification in the most expedient time possible, with no fixed day-count deadline. Learn about the CFA private right of action, AG and State Police reporting, and penalties up to $20K.
Learn about New Jersey data privacy laws including the NJDPA, consumer rights, sensitive data protections, breach notification rules, and AG enforcement penalties.