HB 895 prohibits large food retailers (defined as those with at least 15,000 square feet selling tax-exempt food) from using dynamic pricing (real-time price changes based on demand or AI) or consumer surveillance data to set prices for individual shoppers. It also bans retailers from using data about protected characteristics (like race or gender) to deny discounts or services to specific customers. The bill further protects union rights by preventing retailers from weakening employee benefits under existing collective bargaining agreements without negotiation. Violations would be treated as unfair trade practices under Maryland’s Consumer Protection Act, subject to enforcement and penalties.
SB 601 requires all Maryland local school systems to designate a cybersecurity point of contact by 2027 and comply with state minimum cybersecurity standards established by the Department of Information Technology. Schools must conduct a cybersecurity maturity assessment every two years and certify compliance annually by June 30, starting in 2027. The bill repeals a previous requirement that county boards prioritize purchasing digital devices with certain funds and instead mandates annual reporting on cybersecurity expenditures. It also directs the Department of Information Technology to annually review and update the state cybersecurity standards. This bill directly affects all public school systems in Maryland, focusing on strengthening cybersecurity practices rather than device procurement.
SB 216 updates Maryland's unemployment insurance confidentiality rules to align with federal requirements. It clarifies that claim details (including benefit amounts, address, and work refusal history), wage information, and other personal data are protected as "confidential unemployment insurance information." The bill allows limited disclosure to child support enforcement agencies when permitted under federal law, while adding penalties for unauthorized leaks by current or former Maryland Department of Labor employees. These changes directly affect unemployment claimants, employers, and child support agencies by defining how personal financial data may be shared.
HB 293 authorizes Maryland’s Longitudinal Data System Center to share student and workforce data with external third-party data centers for multistate reporting, while requiring these centers to meet strict privacy and security standards. The bill repeals the Center’s prior authority to share data with the U.S. Census Bureau under certain circumstances and mandates written agreements with third parties before sharing. It directly affects the Center, state education agencies (like the State Department of Education), and external data platforms used for cross-state education and workforce analysis. The key change is establishing formal, secure protocols for sharing data beyond Maryland’s borders, ensuring compliance with privacy laws like FERPA. This focuses on data-sharing mechanisms, not new data collection or program changes.
SB 867 expands the Maryland Aerospace and Technology Commission's mission to specifically promote innovation in space science, space technology, and aeronautics. It restructures the Commission's membership by adding representatives from the commercial space industry (up to three) and higher education institutions, while requiring the Commission to appoint an Executive Director. The bill authorizes the Commission to provide grants to eligible entities - including aerospace businesses, nonprofits, government agencies, and universities conducting aerospace research in Maryland. These changes aim to strengthen Maryland's aerospace sector by formalizing grant programs and broadening stakeholder representation on the Commission.
SB 504 prohibits businesses from selling consumer personal data to buyers who intend to use it for immigration enforcement. It defines "sensitive data" to include immigration status, racial origin, health information, and sexual orientation, requiring businesses to handle such data more carefully. The bill also mandates public record custodians to prevent unauthorized disclosure - especially for immigration enforcement - and requires message switching systems to implement access controls. These changes aim to strengthen privacy protections for Maryland residents while modifying existing data privacy laws in the state code.
HB 195 requires Maryland's State Lottery and Gaming Control Commission to study emerging technologies to improve safety and transparency in gambling. Specifically, it mandates the Commission analyze security tools (like encryption and blockchain), monitor customer behavior for responsible gaming, and verify age/identity to prevent fraud. The bill also obligates the Commission to collaborate with Maryland colleges, foundations, or private entities for these studies and requires the Commission Director to participate in them. This law updates reporting requirements for the Commission to detail lottery revenues, expenses, and any needed legal changes. It directly affects the Commission's operations and the state's gambling regulatory framework, without altering existing gambling laws.
SB 564 creates a new Division of Data Protection within Maryland’s Office of the Attorney General. This division will investigate and enforce civil actions for violations of existing data privacy laws affecting businesses and consumers. It also establishes a Maryland Data Privacy Implementation and Innovation Workgroup, composed of state officials, consumer advocates, business representatives, and industry experts, to study implementation challenges and recommend improvements. The Workgroup must report its findings to the governor and legislature by January 1, 2027, and the bill’s provisions take effect on July 1, 2026, with the Workgroup structure expiring June 30, 2027.
SB 661 modifies Maryland law to clarify when intercepted communications (like phone calls or texts) can be used as evidence in criminal court. It allows such evidence if: (1) at least one party was outside Maryland during the communication, (2) the interception wasn’t done by Maryland law enforcement, and (3) all parties were co-conspirators in a violent crime. For other cases, it sets strict conditions for admissibility, including requiring prosecutors to notify defendants 14 days in advance and proving the evidence is more relevant than alternatives. The bill directly affects criminal defendants, prosecutors, and law enforcement handling wiretap evidence in Maryland courts. It takes effect October 1, 2026.
SB 632 creates a new Office of State Elected Officials Information Privacy within Maryland’s Department of Legislative Services. It allows state elected officials (the "protected individuals") to request that their personal details - such as addresses, phone numbers, and email - be removed from public online sources like government websites, social media, or social networks. The bill also establishes criminal penalties for intentionally posting an official’s personal information online under certain circumstances. This replaces the existing Address Confidentiality Program for domestic violence survivors with a dedicated system specifically for protecting state elected officials’ privacy.
