Manage Maryland Attorney General enforcement under Section 14-4613 and Maryland Consumer Protection Act (Md. Comm. Law Article Section 13-301). Maryland AG (Anthony Brown) Consumer Protection Division (CPD) EXCLUSIVE enforcement authority - NO private right of action. Violations of MODPA are unfair, abusive, or deceptive trade practices under Section 13-301(14)(xlii) (added by SB541). Penalties: civil penalties up to USD 10,000 per violation + USD 25,000 per repeat violation + restitution + injunctive relief + Consumer Protection Division investigations + AG subpoenas + AG court actions. 60-day cure period for first 24 months (until 1 October 2027) then NO CURE PERIOD permanent. AG may consider in determining penalty: number of violations + persistence of misconduct + length of time + willfulness + size + economic impact. Multistate Privacy AG Coalition coordination (Maryland + California + New York + Connecticut + Colorado + Texas + Oregon + Washington + Vermont + Delaware + Massachusetts + Michigan + New Hampshire + New Jersey + Pennsylvania + Rhode Island + Tennessee + 18-state network). Maryland AG Privacy Unit (within CPD) led by Assistant AG. Cooperation with FTC under FTC Act Section 5. Maryland Consumer Health Information Act + Maryland Personal Information Protection Act (PIPA) breach notification still apply concurrently. Maryland Biometric Information Privacy Act 2024 parallel enforcement.
This control maps to 46 controls across 29 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 46 it maps to, and the evidence behind each claim, over MCP and REST.