Law note · Maine
Broadband internet access service, customer personal information privacy
A provider of broadband internet access service may not use, disclose, sell, or permit access to a customer's customer personal information except with the customer's express, affirmative, opt-in consent, revocable at any time, and may not refuse service or charge a penalty or offer a discount based on the customer's consent decision.
"Customer personal information" is defined broadly (name, billing information, Social Security number, demographic data, browsing history, application usage history, precise geolocation, financial and health information, children's information, device identifiers, communications content, and origin and destination IP addresses) but never mentions biometric data.
The section's own history note dates enactment to PL 2019, c. 216, sec. 1, without printing a same-page effective date, so no effective_date is recorded here; the section carries no amendment since. No enforcement or penalty provision appears within the section itself as read.
What it asks of an app
- Obtain a Maine broadband customer's express, affirmative, opt-in consent before using, disclosing, selling, or permitting access to their customer personal information, and let them revoke that consent at any time.
- Do not refuse service, or charge a penalty or offer a discount, based on a customer's consent decision under this statute.
- Do not treat this statute as reaching biometric data. Its customer personal information definition never names biometric, fingerprint, voiceprint, or faceprint data.
When LexLint raises it
Declared activities: automated_outreach, trains_models
Primary source: official Maine statute text, 35-A M.R.S. section 9301, Maine Legislature website