HB 957 requires all Maryland local school systems to designate a cybersecurity point of contact, comply with state minimum cybersecurity standards set by the Department of Information Technology (DOIT), and conduct a cybersecurity maturity assessment every two years starting in 2027. It repeals a prior requirement that county boards prioritize purchasing digital devices with certain funds, shifting focus toward cybersecurity compliance. Schools must annually certify compliance with DOIT’s standards by June 30 and report cybersecurity spending details by August 15 each year. The bill also mandates DOIT to annually review and update the state cybersecurity standards. This directly affects all local school systems and their technology budgeting and reporting practices.
SB 56 authorizes Maryland's Longitudinal Data System Center to share student and workforce data with third-party data centers for multistate research and reporting, replacing its previous ability to share data with the U.S. Census Bureau. The bill requires third-party centers to meet strict security and privacy standards - including using de-identified data, avoiding individual identification, and signing written agreements - before sharing any data. This directly affects the Center (which must now follow these new rules), third-party data centers (which must comply with the requirements), and the privacy of Maryland students and workers whose data is shared.
SB 200 renames Maryland's "Council on Open Data" to the "Council for Open Data" and restructures its membership from 37 to 11 members. The Council now includes 10 state agency heads, the State Chief Data Officer (as chair), three locally appointed officials representing specific county groups, and five private-sector members appointed by the Governor. Its key duties include setting open data standards for portals, ensuring privacy/security, advising on budget needs, and promoting data-sharing partnerships. This directly affects state agencies, local governments (through appointed county representatives), and private-sector stakeholders participating in governance.
SB 216 updates Maryland's unemployment insurance confidentiality rules to align with federal requirements. It clarifies that claim details (including benefit amounts, address, and work refusal history), wage information, and other personal data are protected as "confidential unemployment insurance information." The bill allows limited disclosure to child support enforcement agencies when permitted under federal law, while adding penalties for unauthorized leaks by current or former Maryland Department of Labor employees. These changes directly affect unemployment claimants, employers, and child support agencies by defining how personal financial data may be shared.
HB 293 authorizes Maryland’s Longitudinal Data System Center to share student and workforce data with external third-party data centers for multistate reporting, while requiring these centers to meet strict privacy and security standards. The bill repeals the Center’s prior authority to share data with the U.S. Census Bureau under certain circumstances and mandates written agreements with third parties before sharing. It directly affects the Center, state education agencies (like the State Department of Education), and external data platforms used for cross-state education and workforce analysis. The key change is establishing formal, secure protocols for sharing data beyond Maryland’s borders, ensuring compliance with privacy laws like FERPA. This focuses on data-sharing mechanisms, not new data collection or program changes.
This bill requires Maryland's State Department of Education to create online resources for schools, teachers, and students on the safe, ethical, and equitable use of artificial intelligence in education. It mandates that school districts develop AI policies by December 2027, appoint AI coordinators, and use only AI tools certified by Morgan State University as meeting state guidelines. The law also requires statewide teacher training on AI literacy by July 2027 and includes AI education in workforce preparation standards. These requirements directly affect public K-12 schools, educators, students, and administrators across Maryland.
HB 1167 requires Maryland's Department of Health to replace its outdated Medicaid computer system with a modern, flexible system by 2028. The new system must maintain all current Medicaid functions - including processing medical/dental/pharmacy claims, provider enrollment, and beneficiary inquiries - while meeting federal security and performance standards. The bill mandates integration with existing Medicaid systems by January 2027 and full replacement of the old system by January 2028, subject to federal approval. This change directly affects Medicaid beneficiaries and healthcare providers through more reliable service delivery.
HB 195 requires Maryland's State Lottery and Gaming Control Commission to study emerging technologies to improve safety and transparency in gambling. Specifically, it mandates the Commission analyze security tools (like encryption and blockchain), monitor customer behavior for responsible gaming, and verify age/identity to prevent fraud. The bill also obligates the Commission to collaborate with Maryland colleges, foundations, or private entities for these studies and requires the Commission Director to participate in them. This law updates reporting requirements for the Commission to detail lottery revenues, expenses, and any needed legal changes. It directly affects the Commission's operations and the state's gambling regulatory framework, without altering existing gambling laws.
HB 1037 (Broadband Accountability and Affordability Act) gives Maryland's Public Service Commission authority to oversee broadband and internet-based phone service (VoIP), which it previously could not regulate. The bill requires Internet Service Providers (ISPs) to report on network reliability, outages, pricing, and emergency preparedness plans, and to maintain infrastructure meeting safety and reliability standards. The Commission can audit providers and order corrective actions if services are deemed unsafe, unreliable, or inadequate. ISPs must submit annual reports on progress, with the Commission reporting to the legislature each year starting in 2028 on improvements in service quality and network resilience.
HB 1456 requires real estate websites, social media platforms, and other commercial entities to verify that the person advertising a residential property for sale or lease is either the legal owner or their authorized agent before publishing the listing. Commercial entities must maintain this verification for at least three years and immediately remove any listing published without proper verification. Violations would be treated as unfair, deceptive, or abusive trade practices under Maryland’s Consumer Protection Act, subject to enforcement and penalties. This bill directly affects online property listing services and real estate platforms that publish residential property advertisements. It aims to prevent fraudulent listings by mandating ownership verification as a standard practice.