SB 85 clarifies how Maryland's Information Technology Investment Fund can be used to support state IT systems. The bill requires fund money to directly support the state's telecommunication network and the Maryland First public safety radio system (used by first responders), while giving the Secretary of Information Technology discretion to allocate funds for other state-owned communication sites and equipment related to IT agreements. It does not create new programs but specifies existing fund usage for these concrete purposes. The law takes effect July 1, 2026, and primarily affects state agencies managing IT infrastructure and public safety communications.
SB 8 prohibits using personal identifying information (like Social Security numbers or bank details) or AI-generated deepfakes - defined as computer images indistinguishable from real people - to cause harm, such as physical injury, emotional distress, or financial loss. It bans maliciously disclosing personal details via online services, assuming another’s identity for fraud (e.g., accessing healthcare or avoiding debt), and using devices that copy payment card data without consent. The law directly affects individuals or entities exploiting personal data or deepfakes for fraudulent gain, harassment, or harm. Victims may pursue civil lawsuits against violators, and the bill updates Maryland’s criminal law to address emerging threats from AI and deepfake technology.
HB 264, the Maryland Data Privacy and Protection Act of 2026, sets new rules for how Maryland state government agencies collect, store, and handle personal information. It requires agencies to only collect personal data that is necessary for a legitimate government purpose, delete or remove identifying details when no longer needed, and post clear privacy notices on their websites. The bill specifically defines "sensitive data" (like racial origin, health information, biometric data, and location tracking) and mandates that agencies designate a Privacy Officer to oversee compliance. This law directly affects all Maryland state government units, including departments and agencies, by requiring them to update their data practices to protect residents' privacy.
SB 114 establishes the Maryland 3-1-1 Oversight Board to manage a statewide expansion of nonemergency 3-1-1 services. The bill requires all Maryland counties to implement AI-powered chatbots (by June 2027) and voicebots (by December 2028) that provide multilingual support, route calls accurately, and escalate complex issues to live agents. These systems must align with accessibility and equity standards, using curated government data for responses. The bill directly affects all 23 Maryland counties, residents using 3-1-1 services, and state agencies managing the program, with full statewide implementation required by July 2028.
SB 482 makes it a crime to intentionally access or interfere with computer systems supporting critical infrastructure (like emergency services, utilities, or public safety answering points) with the intent to disrupt operations. It prohibits unauthorized access, ransomware attacks, or sharing access codes to such systems, specifically targeting acts meant to impair public safety services. The law applies to individuals who disrupt or deny access to systems vital for public security, health, transportation, or utilities. It amends Maryland’s criminal code to clarify penalties for these specific cyber-related interferences.
HB 593 amends Maryland's criminal law to specifically prohibit unauthorized actions intended to disrupt critical infrastructure or public safety answering points. It makes it a crime to intentionally access, copy data from, or possess access codes for systems like power grids, emergency call centers, or transportation networks with the intent to impair their function. The bill defines "critical infrastructure" as systems vital to public security, health, safety, or utilities, and explicitly includes ransomware attacks as a prohibited act. This law directly affects individuals who interfere with these essential systems, imposing criminal penalties for intentional disruption.
SB 200 renames Maryland's "Council on Open Data" to the "Council for Open Data" and restructures its membership from 37 to 11 members. The Council now includes 10 state agency heads, the State Chief Data Officer (as chair), three locally appointed officials representing specific county groups, and five private-sector members appointed by the Governor. Its key duties include setting open data standards for portals, ensuring privacy/security, advising on budget needs, and promoting data-sharing partnerships. This directly affects state agencies, local governments (through appointed county representatives), and private-sector stakeholders participating in governance.
SB 216 updates Maryland's unemployment insurance confidentiality rules to align with federal requirements. It clarifies that claim details (including benefit amounts, address, and work refusal history), wage information, and other personal data are protected as "confidential unemployment insurance information." The bill allows limited disclosure to child support enforcement agencies when permitted under federal law, while adding penalties for unauthorized leaks by current or former Maryland Department of Labor employees. These changes directly affect unemployment claimants, employers, and child support agencies by defining how personal financial data may be shared.
SB 504 prohibits businesses from selling consumer personal data to buyers who intend to use it for immigration enforcement. It defines "sensitive data" to include immigration status, racial origin, health information, and sexual orientation, requiring businesses to handle such data more carefully. The bill also mandates public record custodians to prevent unauthorized disclosure - especially for immigration enforcement - and requires message switching systems to implement access controls. These changes aim to strengthen privacy protections for Maryland residents while modifying existing data privacy laws in the state code.
SB 247 converts Maryland's Biotechnology Investment Incentive Tax Credit into a direct grant program administered by the Department of Commerce. It replaces tax credits with cash grants for qualifying biotechnology companies engaged in research, development, or commercialization of biological technologies. The bill requires the Department to disburse grants within a specified timeframe and allows recipients to deduct these grants from their Maryland income tax for the same year. This change shifts the incentive from tax savings to immediate funding, directly affecting eligible biotech firms in Maryland.