HB 711, the Data Privacy Act, prohibits businesses from selling consumer data they know or should know will be used for immigration enforcement. It requires public record custodians to prevent unauthorized access to records, especially for immigration purposes, and mandates reasonable rules to block such access. The bill also defines "sensitive data" to include immigration status, health information, racial background, and biometric data, requiring entities to handle this data carefully. Additionally, it sets new rules for message switching systems (like messaging apps) to prevent misuse of user data. These changes directly affect businesses handling consumer data, government record keepers, and digital service providers in Maryland.
HB 525 requires Maryland county school boards to create and implement policies limiting student use of phones and other electronic communication devices (like tablets or smartwatches) during the academic school day, effective by the 2027-2028 school year. The policy must prohibit personal device use except for specific, documented needs (such as IEP accommodations, health monitoring, emergencies, or educational purposes when school devices aren't available), and require students to store devices securely. School boards must engage parents and staff in developing the policy, publish it in multiple languages, and report annually on its implementation, including enforcement data and impacts on student focus and well-being. The bill directly affects all public school students and county school boards across Maryland.
HB 288 authorizes Maryland's State Superintendent of Schools to declare a prolonged state of emergency when school closures prevent in-person attendance for 14+ consecutive days. It requires county school boards to create detailed virtual education plans before emergencies occur, covering instruction, staffing, technology, student support, and return-to-school protocols. These plans must be updated every two years and approved by the State Board. The bill aims to ensure a structured transition to remote learning during extended school disruptions, taking effect July 2026.
HB 293 authorizes Maryland’s Longitudinal Data System Center to share student and workforce data with external third-party data centers for multistate reporting, while requiring these centers to meet strict privacy and security standards. The bill repeals the Center’s prior authority to share data with the U.S. Census Bureau under certain circumstances and mandates written agreements with third parties before sharing. It directly affects the Center, state education agencies (like the State Department of Education), and external data platforms used for cross-state education and workforce analysis. The key change is establishing formal, secure protocols for sharing data beyond Maryland’s borders, ensuring compliance with privacy laws like FERPA. This focuses on data-sharing mechanisms, not new data collection or program changes.
SB 504 prohibits businesses from selling consumer personal data to buyers who intend to use it for immigration enforcement. It defines "sensitive data" to include immigration status, racial origin, health information, and sexual orientation, requiring businesses to handle such data more carefully. The bill also mandates public record custodians to prevent unauthorized disclosure - especially for immigration enforcement - and requires message switching systems to implement access controls. These changes aim to strengthen privacy protections for Maryland residents while modifying existing data privacy laws in the state code.
SB 351 requires Maryland auto insurers to disclose when they use programs that track driving behavior (like speed or braking) and establish clear processes for policyholders to correct errors in that data. It limits the types and amount of driving data insurers can collect, bans using such data to cancel policies or refuse renewals, and prohibits insurers from raising premiums in increments of less than six months after a policy starts. The law also mandates insurers to adopt governance plans to prevent unfair discrimination in how driving data affects rates. These changes apply to all private passenger vehicle insurance policies in Maryland, taking effect October 1, 2026.
SB 387 prohibits large food retailers (15,000+ sq ft) in Maryland from using dynamic pricing (real-time price changes based on demand or AI) or consumer surveillance data (like location or biometric tracking) to set prices for individual customers. It also bans using protected class data (e.g., race, gender) to deny accommodations or advantages to consumers. The bill further prevents retailers from reducing union-guaranteed employee benefits without negotiating with union representatives. These provisions aim to regulate pricing practices, prevent discriminatory data use, and protect collective bargaining agreements, with violations subject to enforcement under Maryland’s consumer protection laws.
