Bill > H1926

This bill introduces comprehensive privacy protections for tenants in multiple dwellings that use "smart access systems" (electronic entry systems like key cards, mobile apps, or biometric technology). The legislation defines key terms and establishes strict rules about data collection, usage, and protection. Landlords and third-party system operators are prohibited from collecting excessive personal information, with limitations on what data can be gathered, such as only collecting minimal necessary information like name, unit number, and access method. The bill mandates that authentication and reference data must be destroyed within 90 days, with exceptions for certain security or legal purposes. Critically, the law prevents landlords from selling tenant data, tracking tenants' locations outside the building, collecting data about minors without parental consent, or using access system data to harass or evict tenants. Landlords must provide clear written policies about data collection and privacy, and implement robust security measures like data encryption and regular firmware updates. Tenants are granted the right to sue for damages if their data is unlawfully disclosed, with potential compensation ranging from $200 to $1,000 per violation, plus attorneys' fees. The bill aims to protect tenant privacy while allowing reasonable building access and security management in modern, technologically-equipped residential buildings.

Justice

https://malegislature.gov/Bills/194/H1926