SB 504 prohibits businesses from selling consumer personal data to buyers who intend to use it for immigration enforcement. It defines "sensitive data" to include immigration status, racial origin, health information, and sexual orientation, requiring businesses to handle such data more carefully. The bill also mandates public record custodians to prevent unauthorized disclosure - especially for immigration enforcement - and requires message switching systems to implement access controls. These changes aim to strengthen privacy protections for Maryland residents while modifying existing data privacy laws in the state code.
This bill requires Maryland's State Department of Education to create online resources for schools, teachers, and students on the safe, ethical, and equitable use of artificial intelligence in education. It mandates that school districts develop AI policies by December 2027, appoint AI coordinators, and use only AI tools certified by Morgan State University as meeting state guidelines. The law also requires statewide teacher training on AI literacy by July 2027 and includes AI education in workforce preparation standards. These requirements directly affect public K-12 schools, educators, students, and administrators across Maryland.
HB 1341 prohibits public school security personnel - including school resource officers, security employees, and certain law enforcement officers - from engaging in federal immigration enforcement or sharing student/employee records for immigration purposes. The bill requires security staff to immediately contact school officials if presented with a valid judicial warrant, subpoena, or legal order for immigration-related information. It amends Maryland's Education Code to clarify that school security cannot be used for immigration investigations under federal §287(G) and must comply with state privacy laws. This directly affects school security staff and protects students, employees, and their families from immigration enforcement activities within public schools.
HB 1167 requires Maryland's Department of Health to replace its outdated Medicaid computer system with a modern, flexible system by 2028. The new system must maintain all current Medicaid functions - including processing medical/dental/pharmacy claims, provider enrollment, and beneficiary inquiries - while meeting federal security and performance standards. The bill mandates integration with existing Medicaid systems by January 2027 and full replacement of the old system by January 2028, subject to federal approval. This change directly affects Medicaid beneficiaries and healthcare providers through more reliable service delivery.
HB 195 requires Maryland's State Lottery and Gaming Control Commission to study emerging technologies to improve safety and transparency in gambling. Specifically, it mandates the Commission analyze security tools (like encryption and blockchain), monitor customer behavior for responsible gaming, and verify age/identity to prevent fraud. The bill also obligates the Commission to collaborate with Maryland colleges, foundations, or private entities for these studies and requires the Commission Director to participate in them. This law updates reporting requirements for the Commission to detail lottery revenues, expenses, and any needed legal changes. It directly affects the Commission's operations and the state's gambling regulatory framework, without altering existing gambling laws.
SB 564 creates a new Division of Data Protection within Maryland’s Office of the Attorney General. This division will investigate and enforce civil actions for violations of existing data privacy laws affecting businesses and consumers. It also establishes a Maryland Data Privacy Implementation and Innovation Workgroup, composed of state officials, consumer advocates, business representatives, and industry experts, to study implementation challenges and recommend improvements. The Workgroup must report its findings to the governor and legislature by January 1, 2027, and the bill’s provisions take effect on July 1, 2026, with the Workgroup structure expiring June 30, 2027.
HB 1037 (Broadband Accountability and Affordability Act) gives Maryland's Public Service Commission authority to oversee broadband and internet-based phone service (VoIP), which it previously could not regulate. The bill requires Internet Service Providers (ISPs) to report on network reliability, outages, pricing, and emergency preparedness plans, and to maintain infrastructure meeting safety and reliability standards. The Commission can audit providers and order corrective actions if services are deemed unsafe, unreliable, or inadequate. ISPs must submit annual reports on progress, with the Commission reporting to the legislature each year starting in 2028 on improvements in service quality and network resilience.
SB 629 requires all Maryland state government units and public higher education institutions (excluding Morgan State University, the University System of Maryland, St. Mary’s College, and Baltimore City Community College) to implement email security policies. It mandates automatic filtering of spam emails (defined as unsolicited, non-state-business emails like phishing or bulk solicitations unrelated to official duties) and prohibits using state email systems as public forums. The bill also permits minimal personal email use that has no significant impact on resources and aligns with professional business standards. These requirements must be included in institutional IT policies, plans, and standards, effective October 1, 2026.
SB 661 modifies Maryland law to clarify when intercepted communications (like phone calls or texts) can be used as evidence in criminal court. It allows such evidence if: (1) at least one party was outside Maryland during the communication, (2) the interception wasn’t done by Maryland law enforcement, and (3) all parties were co-conspirators in a violent crime. For other cases, it sets strict conditions for admissibility, including requiring prosecutors to notify defendants 14 days in advance and proving the evidence is more relevant than alternatives. The bill directly affects criminal defendants, prosecutors, and law enforcement handling wiretap evidence in Maryland courts. It takes effect October 1, 2026.
SB 632 creates a new Office of State Elected Officials Information Privacy within Maryland’s Department of Legislative Services. It allows state elected officials (the "protected individuals") to request that their personal details - such as addresses, phone numbers, and email - be removed from public online sources like government websites, social media, or social networks. The bill also establishes criminal penalties for intentionally posting an official’s personal information online under certain circumstances. This replaces the existing Address Confidentiality Program for domestic violence survivors with a dedicated system specifically for protecting state elected officials’ privacy.
