Maryland MODPA · Strict-minimization consumer privacy, made adopt-ready · Evidence & Implementation Kit
Meet Maryland's MODPA, without decoding it yourself.
Every requirement handed to you as an adopt-ready control, strict data minimization and sensitive-data limits through consumer rights and minor protections to assessments and processor contracts, with the evidence the Attorney General examines.
Ready in a weekend, not a quarter.
Here is the honest situation. The Maryland Online Data Privacy Act is one of the strictest US state privacy laws. Its signature is data minimization: collection limited to what is reasonably necessary to provide the specific product or service the consumer requested, and sensitive data limited to strict necessity with a ban on selling it or consumer health data. It adds consumer rights, universal opt-out signals, strong protections for minors and consumer health and location data, data protection assessments and processor contracts. An organization that meets other state laws but not MODPA's minimization and sensitive-data rules is exactly where organizations fall short.
This Kit removes the guesswork. It is MODPA written as adopt-ready controls you personalize in a weekend, with the evidence the Attorney General examines.
What you get, the moment you buy
18
Requirements as adopt-ready controls. Every requirement, written so you personalize and apply it.
18
Evidence-they-examine checklists. For each control, exactly what the Attorney General examines, plus where organizations fall short, so you close the gap first.
1
Control Matrix, pre-built. Every requirement in a working spreadsheet, ready to record status, owner and evidence location.
1
Gap & Readiness Assessment. Score each requirement and the workbook returns your readiness as a single percentage, and exactly what to fix next.
Grounded in Maryland Online Data Privacy Act (MODPA). Editable Word and Excel files.
The strictest minimization standard in US state privacy
MODPA does not just require purpose limitation, it caps collection at what is reasonably necessary for the specific requested service and nearly bans sensitive-data collection and the sale of sensitive and consumer health data. A CCPA or VCDPA program will not automatically pass. This Kit builds MODPA's minimization and sensitive-data rules into controls with the evidence the Attorney General asks for.
What one control looks like
This is the first control, where the framework begins. All 18 are built to this depth.
MD-1 Confirm applicability thresholds SCOPE
Put this control in place
Determine and document whether [your organization name] is subject to the Maryland Online Data Privacy Act, considering that it applies to those conducting business in Maryland or targeting its residents that meet the personal data volume thresholds, so scope is clear and the organization can evidence its applicability assessment.
Regulatory note.
The Maryland Online Data Privacy Act (MODPA) applies to controllers meeting defined processing-volume thresholds that do business in or target Maryland.
Evidence the Attorney General examines
- An applicability assessment against MODPA
- Volume thresholds considered
- Records of the determination
Common finding they raise: An organization does not assess whether MODPA applies to it.
Why this is not another template pack
- The evidence is the point. A requirement you cannot evidence is a finding waiting to happen. This tells you what the Attorney General examines and where organizations fall short, for every requirement.
- The substance built in. The core requirements are written into the controls, not left as principles.
- Built on a mapped compliance corpus, not one person's opinion, from a graph of thousands of controls across standards.
- It compounds. This framework aligns with your wider compliance program, so the work feeds other standards.
Who buys this
Organizations subject to this framework and their relevant leads. Whether it is a first alignment or a readiness pass, you save weeks and walk in with the requirements structured.
By the end of the weekend you will have
✓ An adopt-ready control for all 18 requirements
✓ A completed control matrix
✓ The evidence the Attorney General examines
✓ Your core controls in place
✓ A readiness percentage and a fix list
✓ The remaining gaps closed
Common questions
Is it really editable? Yes. Word and Excel files you own and adapt. No portal, no subscription.
Is this legal advice? No. It is an implementation toolkit grounded in MODPA. For a specific matter consult counsel; this gets your controls and evidence in order fast.
Does it help me self-assess? Yes. The Gap and Readiness assessment scores you against the requirements and ranks the fixes.
Does it cover the whole framework? Yes. All 18 controls span the framework end to end.
What if it is not for me? A 30-day money-back guarantee.
Do not face an assessment with requirements you cannot show.
Every requirement is fast to adopt with the Kit. It is instant, and it is guaranteed.
Add it to your cart and be ready this weekend.
Instant digital download · 30-day money-back guarantee · The Art of Service Pty Ltd, GPO Box 2673, Brisbane QLD 4001 · support@theartofservice.com
