Bill > SB616

This bill establishes a data broker registry in Maryland, requiring any business entity that acts as a data broker—meaning they collect, sell, or license "brokered personal data" (which includes information like names, addresses, dates of birth, and biometric data like fingerprints or facial characteristics, but excludes de-identified data or publicly available information)—to register annually with the Comptroller by January 31st. This registration involves submitting specific business information, paying a Comptroller-determined fee, and declaring whether they handle precise geolocation or consumer health data, whether individuals can opt out of data use, how they can exercise these opt-out rights, and if individuals can authorize others to make these choices on their behalf. The Comptroller will then make this submitted information publicly available on their website and is required to report annually to the General Assembly on the number of registered data brokers, fees collected, and any non-compliance penalties. Businesses that fail to register will face daily fines and the cost of investigation by the Attorney General's office, with collected fines and remaining registration fees being used to fund enforcement of various privacy and cybersecurity laws.

Budget and Finance

https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB0616?ys=2026RS