The Internet Thinks Maine Just Killed Targeted Advertising. It Didn’t.

LD 1822 has sparked confusion across Maine’s business community. Here’s what the new privacy law actually changes and what it doesn’t.

When Maine passed the Online Data Privacy Act (LD 1822), a familiar reaction spread quickly across marketing and business circles.

Does this mean targeted advertising is going away?

It’s an understandable question. The phrase “targeted advertising” appears prominently in the legislation, and in an industry built around precision media buying, that wording can trigger alarm bells. But the reality is far less dramatic than many people assume. The law does not eliminate targeted advertising. It doesn’t prevent brands from marketing online. And it doesn’t suddenly make digital media strategies impossible.

What it does is something both simpler and more important because it sets clearer boundaries around how personal data can be collected and used. What’s happening in Maine is part of a much larger shift. For more than a decade, digital advertising operated under the assumption that nearly unlimited behavioral tracking was the cost of doing business online. Privacy laws like LD 1822 are challenging that assumption and in the process forcing the marketing industry to rethink how data, media, and trust actually fit together.

What the Maine Privacy Law Is Actually Trying to Do

LD 1822 focuses primarily on limiting the misuse and sale of personal data, particularly when it comes to sensitive categories of information.

The legislation introduces several consumer rights that are becoming standard in privacy frameworks across the United States. Individuals must be able to request access to the data companies hold about them, ask that it be deleted, and opt out of certain uses of their personal information, including targeted advertising.

The law also introduces stronger protections around sensitive data, including health information, precise geolocation, race, religion, and information related to minors.

If this sounds familiar, it should. Similar frameworks already exist in states like California, Colorado, Connecticut, and Virginia. Maine is joining a broader national shift toward stronger consumer privacy protections.

The key point is that the law is primarily aimed at companies whose business model revolves around collecting and monetizing consumer data at scale — data brokers, large technology platforms, and parts of the advertising technology ecosystem.

Most operating businesses simply don’t function that way.

Why So Many Marketers Are Misreading the Law

The confusion largely comes down to one phrase targeted advertising. When marketers hear that term in legislation, it’s easy to assume the law is trying to restrict audience targeting entirely.

That isn’t what’s happening here.

Instead, the law requires companies to give consumers a clear way to opt out of targeted advertising and to disclose how personal data is collected and used. Certain categories of sensitive data face additional restrictions, and additional protections apply when minors are involved.

But the mechanisms marketers rely on every day - advertising platforms like Meta, Google, connected television, and programmatic media that leverage the data — are still very much part of the ecosystem. What changes is the level of transparency and consumer choice around how data is used.

This pattern has already played out globally. When Europe introduced GDPR in 2018, many predicted the end of targeted advertising. Instead, digital marketing adapted. The industry implemented stronger consent frameworks and clearer disclosures while continuing to operate.

Privacy regulation tends to reshape marketing infrastructure, not erase it.

The Businesses Most Affected Are Not Who People Think

One of the ironies surrounding privacy legislation is that the companies most worried about it are often the ones least affected. Most businesses collect relatively straightforward customer data i.e. newsletter subscriptions, ecommerce transactions, event registrations, or website analytics. This type of first-party relationship data is a normal part of modern commerce.

Privacy laws generally allow this type of data collection as long as it is transparent and used for a clear purpose related to the service being provided. The companies facing the greatest compliance burden are usually those handling massive data sets or building advertising profiles across large portions of the internet. Think data brokers, identity graph providers, and parts of the ad-tech infrastructure fall into that category. Not your mom and pop shops, or even most challenger brands for that matter.

Those businesses operate at a scale where consumer privacy risks become more significant, which is exactly what lawmakers are trying to address.

For most brands, the impact will be operational rather than strategic. Privacy policies may need to be updated. Consent tools may need to be reviewed. Vendor agreements may require updated data-processing language. Marketing teams will need to ensure they can respond to consumer requests related to their data.

But these are largely extensions of processes many organizations already have in place.

What This Means for media Strategy

For marketers, the takeaway isn’t that audience targeting disappears. It’s that responsible data practices become part of modern media strategy. For more than a decade, digital advertising grew around a model of nearly unlimited behavioral tracking. Third-party cookies, device graphs, and cross-site tracking allowed increasingly detailed audience profiles to be built across the internet.

That system has been changing for several years now.

Browsers are restricting tracking technologies. Privacy legislation is expanding across states and countries. Consumers are becoming more aware of how their personal information is used online. As those forces converge, the marketing industry is gradually shifting toward strategies that rely less on surveillance and more on direct relationships and trusted environments.

That includes first-party data strategies, tighter geo based advertising, and partnerships with credible publishers. In many ways, privacy regulation isn’t creating this shift it’s accelerating one that was already underway.

Why This Matters for the Media Ecosystem

There’s also a broader implication worth paying attention to. For years, much of digital advertising has been built on increasingly complex systems designed to track behavior across the internet. Third-party cookies, device graphs, and cross-site tracking enabled detailed audience profiles to be assembled at massive scale. That infrastructure made advertising incredibly efficient in some ways. But it also introduced a level of opacity that eroded trust among consumers, regulators, and even many marketers themselves.

Privacy laws like Maine’s are part of a wider recalibration happening across the media ecosystem.

As restrictions around behavioral tracking grow, marketers are being pushed to rethink how they reach people online. That shift naturally elevates approaches that rely less on surveillance and more on context, quality media environments, and direct relationships with audiences. In practical terms, that means strategies built around first-party relationships, contextual advertising, and trusted publishers become more important again.

For brands, that often leads to better alignment with credible content and media environments. For publishers, including local journalism organizations, that have struggled under the economics of the digital ad market it can help restore some balance to the system.

In other words, while privacy legislation introduces new responsibilities for marketers, it may also help steer the advertising ecosystem toward something healthier… a system where the value of media environments, journalism, and trusted content once again plays a central role in how brands reach audiences.

Setting the Record Straight

The Maine Online Data Privacy Act doesn’t eliminate digital marketing. It doesn’t prevent businesses from advertising online, and it doesn’t ban audience targeting. What it does is introduce clearer guardrails around how personal data can be collected and used.

For most companies, the result will be additional diligence from clearer disclosures, stronger privacy practices, and attention to how marketing platforms process consumer information. The companies most affected will be those built around large-scale data extraction and monetization. This eliminates a large portion (if not most) of the businesses raising concerns.

Everyone else will mostly be adapting operational processes that the industry was already moving toward.

In that sense, the Maine privacy law isn’t a disruption so much as a continuation of a broader trend which is a marketing ecosystem slowly learning how to operate with greater transparency and respect for the people whose data powers it.