Commercial Law - Online Data Privacy - Limits on Data Collection

SB 569 limits how businesses (called "controllers") in Maryland can collect, process, or share personal data. It specifically prohibits selling or collecting sensitive data unless strictly necessary for a requested service, bans using precise geolocation data for targeted ads without consent, and forbids processing data for targeted advertising or selling data of consumers under 18. The bill also prohibits discrimination based on protected characteristics when handling data and bans denying services to consumers who exercise privacy rights. These changes directly affect businesses that collect personal data in Maryland, requiring them to adjust data practices to comply with the new restrictions starting October 1, 2026.