Information Technology - State and Higher Education E-Mail - Requirements

SB 629 requires all Maryland state government units and public higher education institutions (excluding Morgan State University, the University System of Maryland, St. Mary’s College, and Baltimore City Community College) to implement email security policies. It mandates automatic filtering of spam emails (defined as unsolicited, non-state-business emails like phishing or bulk solicitations unrelated to official duties) and prohibits using state email systems as public forums. The bill also permits minimal personal email use that has no significant impact on resources and aligns with professional business standards. These requirements must be included in institutional IT policies, plans, and standards, effective October 1, 2026.