HB 195 requires Maryland's State Lottery and Gaming Control Commission to study emerging technologies to improve safety and transparency in gambling. Specifically, it mandates the Commission analyze security tools (like encryption and blockchain), monitor customer behavior for responsible gaming, and verify age/identity to prevent fraud. The bill also obligates the Commission to collaborate with Maryland colleges, foundations, or private entities for these studies and requires the Commission Director to participate in them. This law updates reporting requirements for the Commission to detail lottery revenues, expenses, and any needed legal changes. It directly affects the Commission's operations and the state's gambling regulatory framework, without altering existing gambling laws.
SB 564 creates a new Division of Data Protection within Maryland’s Office of the Attorney General. This division will investigate and enforce civil actions for violations of existing data privacy laws affecting businesses and consumers. It also establishes a Maryland Data Privacy Implementation and Innovation Workgroup, composed of state officials, consumer advocates, business representatives, and industry experts, to study implementation challenges and recommend improvements. The Workgroup must report its findings to the governor and legislature by January 1, 2027, and the bill’s provisions take effect on July 1, 2026, with the Workgroup structure expiring June 30, 2027.
SB 629 requires all Maryland state government units and public higher education institutions (excluding Morgan State University, the University System of Maryland, St. Mary’s College, and Baltimore City Community College) to implement email security policies. It mandates automatic filtering of spam emails (defined as unsolicited, non-state-business emails like phishing or bulk solicitations unrelated to official duties) and prohibits using state email systems as public forums. The bill also permits minimal personal email use that has no significant impact on resources and aligns with professional business standards. These requirements must be included in institutional IT policies, plans, and standards, effective October 1, 2026.
SB 632 creates a new Office of State Elected Officials Information Privacy within Maryland’s Department of Legislative Services. It allows state elected officials (the "protected individuals") to request that their personal details - such as addresses, phone numbers, and email - be removed from public online sources like government websites, social media, or social networks. The bill also establishes criminal penalties for intentionally posting an official’s personal information online under certain circumstances. This replaces the existing Address Confidentiality Program for domestic violence survivors with a dedicated system specifically for protecting state elected officials’ privacy.
SB 310 prohibits the Maryland Judiciary Case Search system from referencing records of traffic violations committed by minors (under 18) under the Maryland Vehicle Law or other traffic laws. It directly affects minors who receive traffic citations, ensuring these records are not displayed in public online searches. The bill amends Maryland's Criminal Procedure law to require the case search system to omit all references to such minor traffic violations. This change takes effect October 1, 2026, and does not alter the existence of the underlying records.
SB 932 requires social media platforms operating in Maryland to display the city and country (derived from IP address) of each adult user whose account is visible to a Maryland user. It applies to platforms like Facebook or Instagram, directly affecting both the platforms (which must implement this display) and Maryland users (who gain visibility into the general location of other users they interact with). The law explicitly excludes minors' locations from display and defines "general geographical location" to exclude precise GPS data. This is a consumer protection measure focused on transparency, not data collection or sharing.
SB 528 prohibits video streaming services (like Netflix or Disney+) from transmitting commercial advertisements louder than the accompanying video content to Maryland consumers. It directly affects internet-based streaming platforms, excluding traditional TV broadcasters and cable operators. The law requires services to comply with federal loudness standards set by the FCC under the Federal Commercial Advertisement Loudness Mitigation Act. Violations would be treated as unfair trade practices under Maryland's consumer protection law, with enforcement through existing penalty provisions.
SB 25 creates the "Buy Maryland Cybersecurity Tax Credit," allowing Maryland businesses to claim a 50% tax credit (up to $50,000 annually) for purchasing cybersecurity technology or services from Maryland-based cybersecurity companies meeting specific criteria. The credit is refundable (businesses can get cash if the credit exceeds taxes owed) and requires sellers to be Maryland-headquartered, small businesses (under $10 million revenue), and/or owned by minorities, women, veterans, or located in designated business zones. It limits total credits per seller to $1 million annually and ends all new credits after 2030. This directly affects Maryland businesses buying cybersecurity and qualifying Maryland cybersecurity firms.
SB 154 adds Article 12 to Maryland's Uniform Commercial Code to establish rules for property rights in certain digital assets, including controllable electronic records, accounts, and payment intangibles. It directly affects businesses and financial institutions handling digital transactions by defining how control and ownership transfer for these assets. The bill creates a new standard for "control" (requiring exclusive power to access benefits and transfer the asset) and ensures qualifying purchasers acquire rights free of competing claims. This changes how digital property rights are managed under Maryland law, replacing ambiguous state rules with a clear, standardized framework.
