Can I skip updating my privacy policy and other CCPA-related documents in Maine? What are the requirements?

Maine CCPA Requirements

Maine has its own privacy law called the Act to Protect the Privacy of Online Customer Information. This law requires internet service providers to obtain opt-in consent from customers before using, disclosing, selling, or permitting access to their personal information. The law also requires ISPs to take reasonable steps to protect customer information from unauthorized use, disclosure, sale, or access ^[5].

However, the California Consumer Privacy Act (CCPA) applies to businesses that meet certain criteria, regardless of where they are located. If a business collects personal information from California residents and meets one or more of the following criteria, it must comply with the CCPA:

• Annual gross revenue of $25 million or more
• Buys, receives, or sells the personal information of 50,000 or more California residents, households, or devices
• Derives 50% or more of its annual revenue from selling California residents’ personal information ^[1]

Therefore, if your business meets any of the above criteria, you must comply with the CCPA regardless of your location. It is important to note that the CCPA has specific requirements for privacy policies, including the disclosure of consumer rights and the sale of personal information. Failure to comply with the CCPA can result in significant fines and legal action ^[1].

Conclusion

If your business meets the criteria outlined in the CCPA, you must comply with its requirements regardless of your location. It is important to review the specific requirements for privacy policies and other documents to ensure compliance. If you have any questions or concerns, it is recommended that you consult with an attorney ^[1].

Source(s):

• [1] Frequently Asked Questions about Garnishments | NCDOR
• [5] Barbara Daly

Jurisdiction

Maine

• Privacy