Maryland’s New Online Data Privacy Act: Sweeping Protections for Consumer Health Data and Implications for Health Care, Life Sciences, and AI

The Maryland Online Data Privacy Act (MODPA) became effective on October 1, 2025, and applies broadly to organizations handling Maryland residents’ data, including many in the health care and life science industries. Although MODPA includes a certain familiar set of exemptions, it does not exempt nonprofits or HIPAA-regulated entities from its requirements. This narrow approach to exemptions, combined with new and stringent rules for health data, means health care, life science, health IT, and…
By: Baker Donelson