Bill > SB904

This bill establishes a comprehensive regulatory framework for data brokers in Maryland, creating a new system of registration, taxation, and oversight. The legislation creates a Data Broker Registry requiring businesses that collect and sell personal data to register annually with the Comptroller, providing details about their data brokering practices, including whether consumers can opt out of data collection. The bill imposes a 6% gross income tax on data brokers and defines "data brokering" as collecting, aggregating, analyzing, buying, selling, and sharing personal data. The law establishes a new Privacy Protection and Enforcement Unit within the Office of the Attorney General to oversee digital privacy issues, enforce privacy-related laws, and educate consumers about their digital rights. The tax revenue generated will be distributed to several special funds, including supporting the privacy unit, funding digital literacy programs, supporting artificial intelligence projects, and contributing to community support partnerships. Importantly, the bill provides specific definitions for key terms like "personal data," "biometric information," and "de-identified data," and outlines exceptions for certain types of data brokers, such as consumer reporting agencies and financial institutions. The data broker gross income tax will become applicable for taxable years beginning after December 31, 2026, with the law taking effect on July 1, 2025.

Budget and Finance

https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB0904?ys=2025RS