SB 825 creates a Critical Infrastructure Protection Branch within Maryland’s Coordination and Analysis Center to strengthen state-level security for essential systems. The branch will identify threats, prioritize critical infrastructure (like utilities, hospitals, and transportation), and coordinate responses with state agencies and private owners. It requires the Department of Emergency Management to act during infrastructure attacks and mandates the Department of Information Technology to let critical infrastructure owners join the Maryland Information Sharing and Analysis Center while meeting specific cybersecurity reporting standards. This bill directly affects infrastructure operators (e.g., power companies, hospitals) and state agencies responsible for emergency response and cybersecurity.
SB 763 establishes the Maryland Growth Initiative within the Maryland Technology Development Corporation to support early-stage companies transitioning from startup development to scaling. It creates a dedicated $5 million annual fund from state budget appropriations (reinforced by interest earnings and private investment) to provide post-seed funding, helping qualifying companies grow in Maryland without relocating. The initiative must prioritize companies that previously received funding from the corporation or are minority-owned businesses, while maintaining a curated list of eligible firms between startup and scaling phases. The fund operates as a non-lapsing account, with all interest earnings automatically added back to the fund.
HB 898, the DECADE Act, reorganizes Maryland's economic development programs to streamline administration and expand incentives. It redesignates the Economic Development Opportunities Program Account as the "Strategic Closing Fund" under the Department of Commerce, alters eligibility and calculation rules for tax credits (including Job Creation, R&D, and film production credits), and extends the Build Our Future Grant Pilot Program. The bill allows pass-through entities to allocate tax credits to members and removes limits on film production tax credit certificates. These changes directly affect businesses, investors, and film producers seeking state economic development incentives.
HB 1355, the Maryland Stablecoin Act, creates a new regulatory framework for entities providing payment stablecoin services in Maryland. It directly affects nondepository trust companies (financial institutions not covered by FDIC insurance) that wish to offer stablecoin-related services, such as issuing or facilitating transactions with stablecoins (digital currencies pegged to assets like the US dollar). The bill establishes licensing requirements, capital stock rules, and disclosure obligations for these providers under the Commissioner of Financial Regulation, while exempting certain existing nondepository trust companies from unrelated regulations. It adds new sections (14-101 through 14-603) to Maryland’s Financial Institutions code to define terms like "permitted payment stablecoin issuer" and "state issuer," and modifies existing fee structures for new bank charters. The law aims to provide legal clarity and oversight for this emerging financial service within the state.
SB 85 clarifies how Maryland's Information Technology Investment Fund can be used to support state IT systems. The bill requires fund money to directly support the state's telecommunication network and the Maryland First public safety radio system (used by first responders), while giving the Secretary of Information Technology discretion to allocate funds for other state-owned communication sites and equipment related to IT agreements. It does not create new programs but specifies existing fund usage for these concrete purposes. The law takes effect July 1, 2026, and primarily affects state agencies managing IT infrastructure and public safety communications.
HB 266 clarifies how Maryland's Information Technology Investment Fund can be used to support specific state IT systems. It authorizes the Secretary of Information Technology to allocate fund money - paid into the fund under existing rules - to maintain the state's telecommunication network and Maryland First (the public safety radio system for first responders). The bill also allows the Secretary to use fund resources at their discretion for state-owned communication sites, facilities, and equipment related to IT agreements. This bill does not create new funding but specifies existing fund usage for core state IT infrastructure, effective July 1, 2026.
SB 8 prohibits using personal identifying information (like Social Security numbers or bank details) or AI-generated deepfakes - defined as computer images indistinguishable from real people - to cause harm, such as physical injury, emotional distress, or financial loss. It bans maliciously disclosing personal details via online services, assuming another’s identity for fraud (e.g., accessing healthcare or avoiding debt), and using devices that copy payment card data without consent. The law directly affects individuals or entities exploiting personal data or deepfakes for fraudulent gain, harassment, or harm. Victims may pursue civil lawsuits against violators, and the bill updates Maryland’s criminal law to address emerging threats from AI and deepfake technology.
HB 264, the Maryland Data Privacy and Protection Act of 2026, sets new rules for how Maryland state government agencies collect, store, and handle personal information. It requires agencies to only collect personal data that is necessary for a legitimate government purpose, delete or remove identifying details when no longer needed, and post clear privacy notices on their websites. The bill specifically defines "sensitive data" (like racial origin, health information, biometric data, and location tracking) and mandates that agencies designate a Privacy Officer to oversee compliance. This law directly affects all Maryland state government units, including departments and agencies, by requiring them to update their data practices to protect residents' privacy.
SB 114 establishes the Maryland 3-1-1 Oversight Board to manage a statewide expansion of nonemergency 3-1-1 services. The bill requires all Maryland counties to implement AI-powered chatbots (by June 2027) and voicebots (by December 2028) that provide multilingual support, route calls accurately, and escalate complex issues to live agents. These systems must align with accessibility and equity standards, using curated government data for responses. The bill directly affects all 23 Maryland counties, residents using 3-1-1 services, and state agencies managing the program, with full statewide implementation required by July 2028.
HB 718 requires public institutions of higher education in Maryland (excluding Morgan State University, the University System of Maryland, St. Mary’s College, and Baltimore City Community College) to adopt email security policies aligned with state government standards. It mandates that all employee email systems automatically filter spam and non-state-business emails (like unsolicited marketing) while permitting minimal personal use that doesn’t impact resources or violate professional norms. The bill extends existing state IT requirements to these institutions, ensuring email systems support official work only and include specific security measures. This directly affects higher education employees and administrators responsible for managing institutional email systems.
