HB 293 authorizes Maryland’s Longitudinal Data System Center to share student and workforce data with external third-party data centers for multistate reporting, while requiring these centers to meet strict privacy and security standards. The bill repeals the Center’s prior authority to share data with the U.S. Census Bureau under certain circumstances and mandates written agreements with third parties before sharing. It directly affects the Center, state education agencies (like the State Department of Education), and external data platforms used for cross-state education and workforce analysis. The key change is establishing formal, secure protocols for sharing data beyond Maryland’s borders, ensuring compliance with privacy laws like FERPA. This focuses on data-sharing mechanisms, not new data collection or program changes.
SB 867 expands the Maryland Aerospace and Technology Commission's mission to specifically promote innovation in space science, space technology, and aeronautics. It restructures the Commission's membership by adding representatives from the commercial space industry (up to three) and higher education institutions, while requiring the Commission to appoint an Executive Director. The bill authorizes the Commission to provide grants to eligible entities - including aerospace businesses, nonprofits, government agencies, and universities conducting aerospace research in Maryland. These changes aim to strengthen Maryland's aerospace sector by formalizing grant programs and broadening stakeholder representation on the Commission.
SB 504 prohibits businesses from selling consumer personal data to buyers who intend to use it for immigration enforcement. It defines "sensitive data" to include immigration status, racial origin, health information, and sexual orientation, requiring businesses to handle such data more carefully. The bill also mandates public record custodians to prevent unauthorized disclosure - especially for immigration enforcement - and requires message switching systems to implement access controls. These changes aim to strengthen privacy protections for Maryland residents while modifying existing data privacy laws in the state code.
This bill requires Maryland's State Department of Education to create online resources for schools, teachers, and students on the safe, ethical, and equitable use of artificial intelligence in education. It mandates that school districts develop AI policies by December 2027, appoint AI coordinators, and use only AI tools certified by Morgan State University as meeting state guidelines. The law also requires statewide teacher training on AI literacy by July 2027 and includes AI education in workforce preparation standards. These requirements directly affect public K-12 schools, educators, students, and administrators across Maryland.
HB 1341 prohibits public school security personnel - including school resource officers, security employees, and certain law enforcement officers - from engaging in federal immigration enforcement or sharing student/employee records for immigration purposes. The bill requires security staff to immediately contact school officials if presented with a valid judicial warrant, subpoena, or legal order for immigration-related information. It amends Maryland's Education Code to clarify that school security cannot be used for immigration investigations under federal §287(G) and must comply with state privacy laws. This directly affects school security staff and protects students, employees, and their families from immigration enforcement activities within public schools.
HB 1167 requires Maryland's Department of Health to replace its outdated Medicaid computer system with a modern, flexible system by 2028. The new system must maintain all current Medicaid functions - including processing medical/dental/pharmacy claims, provider enrollment, and beneficiary inquiries - while meeting federal security and performance standards. The bill mandates integration with existing Medicaid systems by January 2027 and full replacement of the old system by January 2028, subject to federal approval. This change directly affects Medicaid beneficiaries and healthcare providers through more reliable service delivery.
HB 195 requires Maryland's State Lottery and Gaming Control Commission to study emerging technologies to improve safety and transparency in gambling. Specifically, it mandates the Commission analyze security tools (like encryption and blockchain), monitor customer behavior for responsible gaming, and verify age/identity to prevent fraud. The bill also obligates the Commission to collaborate with Maryland colleges, foundations, or private entities for these studies and requires the Commission Director to participate in them. This law updates reporting requirements for the Commission to detail lottery revenues, expenses, and any needed legal changes. It directly affects the Commission's operations and the state's gambling regulatory framework, without altering existing gambling laws.
SB 564 creates a new Division of Data Protection within Maryland’s Office of the Attorney General. This division will investigate and enforce civil actions for violations of existing data privacy laws affecting businesses and consumers. It also establishes a Maryland Data Privacy Implementation and Innovation Workgroup, composed of state officials, consumer advocates, business representatives, and industry experts, to study implementation challenges and recommend improvements. The Workgroup must report its findings to the governor and legislature by January 1, 2027, and the bill’s provisions take effect on July 1, 2026, with the Workgroup structure expiring June 30, 2027.
HB 1037 (Broadband Accountability and Affordability Act) gives Maryland's Public Service Commission authority to oversee broadband and internet-based phone service (VoIP), which it previously could not regulate. The bill requires Internet Service Providers (ISPs) to report on network reliability, outages, pricing, and emergency preparedness plans, and to maintain infrastructure meeting safety and reliability standards. The Commission can audit providers and order corrective actions if services are deemed unsafe, unreliable, or inadequate. ISPs must submit annual reports on progress, with the Commission reporting to the legislature each year starting in 2028 on improvements in service quality and network resilience.
SB 629 requires all Maryland state government units and public higher education institutions (excluding Morgan State University, the University System of Maryland, St. Mary’s College, and Baltimore City Community College) to implement email security policies. It mandates automatic filtering of spam emails (defined as unsolicited, non-state-business emails like phishing or bulk solicitations unrelated to official duties) and prohibits using state email systems as public forums. The bill also permits minimal personal email use that has no significant impact on resources and aligns with professional business standards. These requirements must be included in institutional IT policies, plans, and standards, effective October 1, 2026.
