Privacy advocates are urging Maryland officials to investigate data brokers for allegedly violating the state's data privacy law by selling consumer information to law enforcement and immigration authorities.
Maryland enacted one of America's most restrictive data privacy statutes, yet advocates contend that brokers continue to circumvent these protections by transferring personal data to police departments and federal immigration agencies without consumer consent. The practice raises questions about whether existing enforcement mechanisms adequately protect residents.
The Maryland Online Data Privacy Act imposes strict requirements on how companies handle personal information. The law limits data collection, mandates transparency, and gives residents rights to access and delete their data. However, the law contains exceptions for law enforcement requests, creating a gray area that advocates say brokers exploit.
Data brokers aggregate consumer information from various sources, then package and resell it to third parties. Police and Immigration and Customs Enforcement have purchased such data to conduct surveillance and investigations without obtaining warrants. This practice sidesteps privacy protections that would normally require judicial approval for law enforcement access.
Privacy advocates argue that selling to government agencies effectively nullifies consumer protections. When data brokers act as intermediaries between residents and federal authorities, they enable surveillance that residents never authorized. The practice particularly affects immigrant communities targeted by ICE.
Maryland's Attorney General holds authority to enforce the data privacy law and investigate potential violations. Privacy groups are demanding action to close loopholes and ensure data brokers comply with the statute's intent, not merely its letter.
The case reflects a broader national tension between privacy law and law enforcement access. States like California and Vermont passed similar data privacy statutes, yet brokers continue selling to police regardless. Without aggressive enforcement and potentially amended language, advocates warn that state privacy laws become hollow.