HB 1355, the Maryland Stablecoin Act, creates a new regulatory framework for entities providing payment stablecoin services in Maryland. It directly affects nondepository trust companies (financial institutions not covered by FDIC insurance) that wish to offer stablecoin-related services, such as issuing or facilitating transactions with stablecoins (digital currencies pegged to assets like the US dollar). The bill establishes licensing requirements, capital stock rules, and disclosure obligations for these providers under the Commissioner of Financial Regulation, while exempting certain existing nondepository trust companies from unrelated regulations. It adds new sections (14-101 through 14-603) to Maryland’s Financial Institutions code to define terms like "permitted payment stablecoin issuer" and "state issuer," and modifies existing fee structures for new bank charters. The law aims to provide legal clarity and oversight for this emerging financial service within the state.
SB 85 clarifies how Maryland's Information Technology Investment Fund can be used to support state IT systems. The bill requires fund money to directly support the state's telecommunication network and the Maryland First public safety radio system (used by first responders), while giving the Secretary of Information Technology discretion to allocate funds for other state-owned communication sites and equipment related to IT agreements. It does not create new programs but specifies existing fund usage for these concrete purposes. The law takes effect July 1, 2026, and primarily affects state agencies managing IT infrastructure and public safety communications.
SB 8 prohibits using personal identifying information (like Social Security numbers or bank details) or AI-generated deepfakes - defined as computer images indistinguishable from real people - to cause harm, such as physical injury, emotional distress, or financial loss. It bans maliciously disclosing personal details via online services, assuming another’s identity for fraud (e.g., accessing healthcare or avoiding debt), and using devices that copy payment card data without consent. The law directly affects individuals or entities exploiting personal data or deepfakes for fraudulent gain, harassment, or harm. Victims may pursue civil lawsuits against violators, and the bill updates Maryland’s criminal law to address emerging threats from AI and deepfake technology.
HB 487 amends Maryland law to give the Maryland Technology Development Corporation (MTDC) more flexibility regarding investments in businesses that no longer qualify under program rules. Specifically, it changes the requirement that MTDC must divest such investments to an authorization allowing it to choose whether to divest or pursue other remedies (like repayment) when a business no longer meets "qualified business" criteria. The bill also updates procedures for the MTDC's investment committee to consider these remedies. This directly affects MTDC and businesses that previously received MTDC equity investments but no longer qualify under the program.
SB 114 establishes the Maryland 3-1-1 Oversight Board to manage a statewide expansion of nonemergency 3-1-1 services. The bill requires all Maryland counties to implement AI-powered chatbots (by June 2027) and voicebots (by December 2028) that provide multilingual support, route calls accurately, and escalate complex issues to live agents. These systems must align with accessibility and equity standards, using curated government data for responses. The bill directly affects all 23 Maryland counties, residents using 3-1-1 services, and state agencies managing the program, with full statewide implementation required by July 2028.
HB 718 requires public institutions of higher education in Maryland (excluding Morgan State University, the University System of Maryland, St. Mary’s College, and Baltimore City Community College) to adopt email security policies aligned with state government standards. It mandates that all employee email systems automatically filter spam and non-state-business emails (like unsolicited marketing) while permitting minimal personal use that doesn’t impact resources or violate professional norms. The bill extends existing state IT requirements to these institutions, ensuring email systems support official work only and include specific security measures. This directly affects higher education employees and administrators responsible for managing institutional email systems.
SB 482 makes it a crime to intentionally access or interfere with computer systems supporting critical infrastructure (like emergency services, utilities, or public safety answering points) with the intent to disrupt operations. It prohibits unauthorized access, ransomware attacks, or sharing access codes to such systems, specifically targeting acts meant to impair public safety services. The law applies to individuals who disrupt or deny access to systems vital for public security, health, transportation, or utilities. It amends Maryland’s criminal code to clarify penalties for these specific cyber-related interferences.
HB 593 amends Maryland's criminal law to specifically prohibit unauthorized actions intended to disrupt critical infrastructure or public safety answering points. It makes it a crime to intentionally access, copy data from, or possess access codes for systems like power grids, emergency call centers, or transportation networks with the intent to impair their function. The bill defines "critical infrastructure" as systems vital to public security, health, safety, or utilities, and explicitly includes ransomware attacks as a prohibited act. This law directly affects individuals who interfere with these essential systems, imposing criminal penalties for intentional disruption.
HB 895 prohibits large food retailers (defined as those with at least 15,000 square feet selling tax-exempt food) from using dynamic pricing (real-time price changes based on demand or AI) or consumer surveillance data to set prices for individual shoppers. It also bans retailers from using data about protected characteristics (like race or gender) to deny discounts or services to specific customers. The bill further protects union rights by preventing retailers from weakening employee benefits under existing collective bargaining agreements without negotiation. Violations would be treated as unfair trade practices under Maryland’s Consumer Protection Act, subject to enforcement and penalties.
SB 601 requires all Maryland local school systems to designate a cybersecurity point of contact by 2027 and comply with state minimum cybersecurity standards established by the Department of Information Technology. Schools must conduct a cybersecurity maturity assessment every two years and certify compliance annually by June 30, starting in 2027. The bill repeals a previous requirement that county boards prioritize purchasing digital devices with certain funds and instead mandates annual reporting on cybersecurity expenditures. It also directs the Department of Information Technology to annually review and update the state cybersecurity standards. This bill directly affects all public school systems in Maryland, focusing on strengthening cybersecurity practices rather than device procurement.
