Business Regulation - Data Broker Registry

SB 616 creates a Maryland registry requiring businesses that collect and sell personal data (like names, addresses, biometric information, or Social Security numbers) to register annually with the state Comptroller. It defines "data brokers" as entities selling "brokered personal data" but excludes credit bureaus, banks under federal law, and nonprofits assisting law enforcement. The law mandates registration for qualifying businesses to operate, focusing on transparency around how personal data is collected and sold. It specifically covers sensitive data types (e.g., facial recognition, DNA sequences) while clarifying exclusions to avoid overlapping with federal regulations.