SB 8 prohibits using personal identifying information (like Social Security numbers or bank details) or AI-generated deepfakes - defined as computer images indistinguishable from real people - to cause harm, such as physical injury, emotional distress, or financial loss. It bans maliciously disclosing personal details via online services, assuming another’s identity for fraud (e.g., accessing healthcare or avoiding debt), and using devices that copy payment card data without consent. The law directly affects individuals or entities exploiting personal data or deepfakes for fraudulent gain, harassment, or harm. Victims may pursue civil lawsuits against violators, and the bill updates Maryland’s criminal law to address emerging threats from AI and deepfake technology.
SB 114 establishes the Maryland 3-1-1 Oversight Board to manage a statewide expansion of nonemergency 3-1-1 services. The bill requires all Maryland counties to implement AI-powered chatbots (by June 2027) and voicebots (by December 2028) that provide multilingual support, route calls accurately, and escalate complex issues to live agents. These systems must align with accessibility and equity standards, using curated government data for responses. The bill directly affects all 23 Maryland counties, residents using 3-1-1 services, and state agencies managing the program, with full statewide implementation required by July 2028.
HB 718 requires public institutions of higher education in Maryland (excluding Morgan State University, the University System of Maryland, St. Mary’s College, and Baltimore City Community College) to adopt email security policies aligned with state government standards. It mandates that all employee email systems automatically filter spam and non-state-business emails (like unsolicited marketing) while permitting minimal personal use that doesn’t impact resources or violate professional norms. The bill extends existing state IT requirements to these institutions, ensuring email systems support official work only and include specific security measures. This directly affects higher education employees and administrators responsible for managing institutional email systems.
SB 482 makes it a crime to intentionally access or interfere with computer systems supporting critical infrastructure (like emergency services, utilities, or public safety answering points) with the intent to disrupt operations. It prohibits unauthorized access, ransomware attacks, or sharing access codes to such systems, specifically targeting acts meant to impair public safety services. The law applies to individuals who disrupt or deny access to systems vital for public security, health, transportation, or utilities. It amends Maryland’s criminal code to clarify penalties for these specific cyber-related interferences.
HB 895 prohibits large food retailers (defined as those with at least 15,000 square feet selling tax-exempt food) from using dynamic pricing (real-time price changes based on demand or AI) or consumer surveillance data to set prices for individual shoppers. It also bans retailers from using data about protected characteristics (like race or gender) to deny discounts or services to specific customers. The bill further protects union rights by preventing retailers from weakening employee benefits under existing collective bargaining agreements without negotiation. Violations would be treated as unfair trade practices under Maryland’s Consumer Protection Act, subject to enforcement and penalties.
SB 601 requires all Maryland local school systems to designate a cybersecurity point of contact by 2027 and comply with state minimum cybersecurity standards established by the Department of Information Technology. Schools must conduct a cybersecurity maturity assessment every two years and certify compliance annually by June 30, starting in 2027. The bill repeals a previous requirement that county boards prioritize purchasing digital devices with certain funds and instead mandates annual reporting on cybersecurity expenditures. It also directs the Department of Information Technology to annually review and update the state cybersecurity standards. This bill directly affects all public school systems in Maryland, focusing on strengthening cybersecurity practices rather than device procurement.
SB 56 authorizes Maryland's Longitudinal Data System Center to share student and workforce data with third-party data centers for multistate research and reporting, replacing its previous ability to share data with the U.S. Census Bureau. The bill requires third-party centers to meet strict security and privacy standards - including using de-identified data, avoiding individual identification, and signing written agreements - before sharing any data. This directly affects the Center (which must now follow these new rules), third-party data centers (which must comply with the requirements), and the privacy of Maryland students and workers whose data is shared.
SB 216 updates Maryland's unemployment insurance confidentiality rules to align with federal requirements. It clarifies that claim details (including benefit amounts, address, and work refusal history), wage information, and other personal data are protected as "confidential unemployment insurance information." The bill allows limited disclosure to child support enforcement agencies when permitted under federal law, while adding penalties for unauthorized leaks by current or former Maryland Department of Labor employees. These changes directly affect unemployment claimants, employers, and child support agencies by defining how personal financial data may be shared.
SB 867 expands the Maryland Aerospace and Technology Commission's mission to specifically promote innovation in space science, space technology, and aeronautics. It restructures the Commission's membership by adding representatives from the commercial space industry (up to three) and higher education institutions, while requiring the Commission to appoint an Executive Director. The bill authorizes the Commission to provide grants to eligible entities - including aerospace businesses, nonprofits, government agencies, and universities conducting aerospace research in Maryland. These changes aim to strengthen Maryland's aerospace sector by formalizing grant programs and broadening stakeholder representation on the Commission.
SB 247 converts Maryland's Biotechnology Investment Incentive Tax Credit into a direct grant program administered by the Department of Commerce. It replaces tax credits with cash grants for qualifying biotechnology companies engaged in research, development, or commercialization of biological technologies. The bill requires the Department to disburse grants within a specified timeframe and allows recipients to deduct these grants from their Maryland income tax for the same year. This change shifts the incentive from tax savings to immediate funding, directly affecting eligible biotech firms in Maryland.
