Law note · Maryland
Maryland Online Data Privacy Act (MODPA), sensitive data and biometric consent
MODPA classifies genetic or biometric data, alongside racial or ethnic origin, religious belief, health data, sexuality, transgender or nonbinary status, national origin, citizenship or immigration status, a known child's data, and precise geolocation, as sensitive data.
A controller may not collect, process, or share sensitive data unless strictly necessary to provide a product or service the consumer requested, may never sell sensitive data, and may not process or sell a consumer's personal data for targeted advertising if it knew or should have known the consumer is under 18.
'Biometric data' means data from automatic measurement of a consumer's biological characteristics used to uniquely authenticate identity, including a fingerprint, voiceprint, or eye retina or iris image, and excludes a bare photograph or an audio or video recording, but claws that exclusion back the moment data generated from one is generated to identify a specific consumer.
What it asks of an app
- Do not collect, process, or share sensitive data, including genetic or biometric data, unless strictly necessary to provide a product or service the consumer requested. MODPA supplies no separate consent-only path around this necessity requirement.
- Never sell sensitive data. MODPA bans the sale of sensitive data outright.
- Treat an identifier your product derives from a public photo, video, or audio recording specifically to identify a person as covered biometric data, and therefore sensitive data, even though a bare photograph or recording by itself is excluded. The exclusion does not survive identification-purpose derivation.
- Do not process a consumer's personal data for targeted advertising, or sell it, if you know or should know the consumer is under 18.
When LexLint raises it
Declared activities: processes_biometrics, processes_voice, crawls_web, trains_models
Primary source: official Maryland statute text, Commercial Law Article, Title 14 Subtitle 47, Maryland General Assembly statute lookup