Can I skip obtaining consent to sell personal information in Maine? What are the requirements?

Obtaining Consent to Sell Personal Information in Maine

Based on the context documents, obtaining consent is required before selling personal information in Maine. Maine law defines “personal information” as an individual’s first name, or first initial, and last name in combination with any one or more of the following data elements, when either the name or the data elements are not encrypted or redacted: social security number, driver’s license number or state identification card number, account number, credit card number or debit card number, account passwords or personal identification numbers or other access codes ^[1.2].

If an information broker or any other person who maintains computerized data that includes personal information becomes aware of a breach of the security of the system, they must conduct a reasonable and prompt investigation to determine the likelihood that personal information has been or will be misused and shall give notice of a breach of the security of the system following discovery or notification of the security breach to a resident of this State whose personal information has been, or is reasonably believed to have been, acquired by an unauthorized person ^[1.3].

Failure to comply with the security breach notification requirements of Maine law may result in a civil violation and a fine of not more than $500 per violation, up to a maximum of $2,500 for each day the person is in violation of this chapter ^[1.4].

Therefore, it is important to obtain consent before selling personal information in Maine to avoid potential legal consequences.

^{[1.2] [1.3] [1.4]}

Source(s):

• [1.2] Definitions
• [1.3] Security breach notice requirements
• [1.4] Enforcement; penalties

Jurisdiction

Maine

• Privacy