Consumer Protection - Data Broker Registry - Establishment

HB 1089 requires data brokers operating in Maryland or collecting data on Maryland residents to register annually with the Attorney General’s Office starting January 31, 2028. Data brokers must submit details about the personal data they collect, sources, third parties they share with, consumer contact information, and opt-out methods. The Attorney General will maintain a public, searchable database of registered brokers (excluding trade secrets) and set tiered fees based on the broker’s annual revenue. The law aims to increase transparency for consumers about data practices without restricting lawful data collection, with enforcement including civil penalties for non-compliance. It takes effect October 1, 2026, and requires the Attorney General to report compliance metrics and consumer complaints to the legislature by December 2029.