MRS Title 35-A, §9301. PRIVACY OF BROADBAND INTERNET ACCESS SERVICE CUSTOMER PERSONAL INFORMATION§9301. Privacy of broadband Internet access service customer personal information
1. Definitions. As used in this section, unless the context otherwise indicates, the following terms
have the following meanings.
A. "Broadband Internet access service" means a mass-market retail service by wire or radio thatprovides the capability to transmit data to and receive data from all or substantially all Internet
endpoints, including any capabilities that are incidental to and enable the operation of the service,excluding dial-up Internet access service. [PL 2019, c. 216, §1 (NEW); PL 2019, c. 216, §2(AFF).]
B. "Customer" means an applicant for or a current or former subscriber of broadband Internet
access service. [PL 2019, c. 216, §1 (NEW); PL 2019, c. 216, §2 (AFF).]
C. "Customer personal information" means:(1) Personally identifying information about a customer, including but not limited to thecustomer's name, billing information, social security number, billing address and demographic
data; and(2) Information from a customer's use of broadband Internet access service, including but notlimited to:(a) The customer's web browsing history;(b) The customer's application usage history;(c) The customer's precise geolocation information;(d) The customer's financial information;(e) The customer's health information;(f) Information pertaining to the customer's children;(g) The customer's device identifier, such as a media access control address, international
mobile equipment identity or Internet protocol address;(h) The content of the customer's communications; and(i) The origin and destination Internet protocol addresses. [PL 2019, c. 216, §1 (NEW);
PL 2019, c. 216, §2 (AFF).]
D. "Provider" means a person who provides broadband Internet access service. [PL 2019, c. 216,
§1 (NEW); PL 2019, c. 216, §2 (AFF).][PL 2019, c. 216, §1 (NEW); PL 2019, c. 216, §2 (AFF).]
2. Privacy of customer personal information. A provider may not use, disclose, sell or permit
access to customer personal information, except as provided in subsections 3 and 4, Title 16, chapter
3, subchapters 10 and 11 and 18 United States Code, Section 2703.
[PL 2019, c. 216, §1 (NEW); PL 2019, c. 216, §2 (AFF).]
3. Customer consent exception. Consent of a customer is governed by this subsection.
A. A provider may use, disclose, sell or permit access to a customer's customer personal
information if the customer gives the provider express, affirmative consent to such use, disclosure,sale or access. A customer may revoke the customer's consent under this paragraph at any time.
[PL 2019, c. 216, §1 (NEW); PL 2019, c. 216, §2 (AFF).]
B. A provider may not:(1) Refuse to serve a customer who does not provide consent under paragraph A; orGenerated
10.30.2023§9301. Privacy of broadband Internet access service customer personal
information| 1MRS Title 35-A, §9301. PRIVACY OF BROADBAND INTERNET ACCESS SERVICE CUSTOMER PERSONAL INFORMATION(2) Charge a customer a penalty or offer a customer a discount based on the customer's decision
to provide or not provide consent under paragraph A. [PL 2019, c. 216, §1 (NEW); PL 2019,c. 216, §2 (AFF).]
C. A provider may use, disclose, sell or permit access to information the provider collects
pertaining to a customer that is not customer personal information, except upon written notice fromthe customer notifying the provider that the customer does not permit the provider to use, disclose,
sell or permit access to that information. [PL 2019, c. 216, §1 (NEW); PL 2019, c. 216, §2(AFF).][PL 2019, c. 216, §1 (NEW); PL 2019, c. 216, §2 (AFF).]
4. Other exceptions. Notwithstanding the provisions of subsections 2 and 3, a provider may
collect, retain, use, disclose, sell and permit access to customer personal information without customerapproval:
A. For the purpose of providing the service from which such information is derived or for theservices necessary to the provision of such service; [PL 2019, c. 216, §1 (NEW); PL 2019, c.
216, §2 (AFF).]
B. To advertise or market the provider's communications-related services to the customer; [PL2019, c. 216, §1 (NEW); PL 2019, c. 216, §2 (AFF).]
C. To comply with a lawful court order; [PL 2019, c. 216, §1 (NEW); PL 2019, c. 216, §2(AFF).]D. To initiate, render, bill for and collect payment for broadband Internet access service; [PL2019, c. 216, §1 (NEW); PL 2019, c. 216, §2 (AFF).]E. To protect users of the provider's or other providers' services from fraudulent, abusive or
unlawful use of or subscription to such services; and [PL 2019, c. 216, §1 (NEW); PL 2019, c.
216, §2 (AFF).]F. To provide geolocation information concerning the customer:(1) For the purpose of responding to a customer's call for emergency services, to a public safety
answering point; a provider of emergency medical or emergency dispatch services; a publicsafety, fire service or law enforcement official; or a hospital emergency or trauma care facility;or(2) To a provider of information or database management services solely for the purpose ofassisting in the delivery of emergency services in response to an emergency. [PL 2019, c.
216, §1 (NEW); PL 2019, c. 216, §2 (AFF).][PL 2019, c. 216, §1 (NEW); PL 2019, c. 216, §2 (AFF).]
5. Security of customer personal information. A provider shall take reasonable measures toprotect customer personal information from unauthorized use, disclosure or access.
A. In implementing security measures required by this subsection, a provider shall take into
account each of the following factors:(1) The nature and scope of the provider's activities;(2) The sensitivity of the data the provider collects;(3) The size of the provider; and(4) The technical feasibility of the security measures. [PL 2019, c. 216, §1 (NEW); PL
2019, c. 216, §2 (AFF).]
B. A provider may employ any lawful measure that allows the provider to comply with therequirements of this subsection. [PL 2019, c. 216, §1 (NEW); PL 2019, c. 216, §2 (AFF).]2 |§9301. Privacy of broadband Internet access service customer personal
information

Generated
10.30.2023

MRS Title 35-A, §9301. PRIVACY OF BROADBAND INTERNET ACCESS SERVICE CUSTOMER PERSONAL INFORMATION[PL 2019, c. 216, §1 (NEW); PL 2019, c. 216, §2 (AFF).]
6. Notice required. A provider shall provide to each of the provider's customers a clear,conspicuous and nondeceptive notice at the point of sale and on the provider's publicly accessible
website of the provider's obligations and a customer's rights under this section.
[PL 2019, c. 216, §1 (NEW); PL 2019, c. 216, §2 (AFF).]
7. Applicability. The requirements of this section apply to providers operating within the State
when providing broadband Internet access service to customers that are physically located and billed
for service received in the State.
[PL 2019, c. 216, §1 (NEW); PL 2019, c. 216, §2 (AFF).]SECTION HISTORY
PL 2019, c. 216, §1 (NEW). PL 2019, c. 216, §2 (AFF).
The State of Maine claims a copyright in its codified statutes. If you intend to republish this material, we require that you include
the following disclaimer in your publication:All copyrights and other rights to statutory text are reserved by the State of Maine. The text included in this publication reflects
changes made through the First Regular and First Special Session of the 131st Maine Legislature and is current through November
1. 2023. The text is subject to change without notice. It is a version that has not been officially certified by the Secretary of State.
Refer to the Maine Revised Statutes Annotated and supplements for certified text.
The Office of the Revisor of Statutes also requests that you send us one copy of any statutory publication you may produce. Ourgoal is not to restrict publishing activity, but to keep track of who is publishing what, to identify any needless duplication and topreserve the State's copyright rights.
PLEASE NOTE: The Revisor's Office cannot perform research for or provide legal advice or interpretation of Maine law to thepublic. If you need legal assistance, please contact a qualified attorney.

Generated
10.30.2023§9301. Privacy of broadband Internet access service customer personalinformation| 3