Bill > HB1220

This bill establishes a data broker registry in Maryland, requiring any business entity that acted as a data broker, defined as a business that collects, sells, or licenses "brokered personal data" (which includes information like names, addresses, birth dates, Social Security numbers, and biometric information like fingerprints or facial characteristics, when collected for sale or licensing), to register with the Comptroller annually by January 31st. This registration involves submitting specific business information, paying a fee determined by the Comptroller to cover administrative costs, and declaring whether they handle precise geolocation or consumer health data, whether individuals can opt out of data use, and how they can exercise those opt-out rights. The Comptroller will then make this submitted information publicly available on their website and will report annually to the General Assembly on the number of registered data brokers, fees collected, and any non-compliance penalties. Businesses that fail to register will face daily fines and will be responsible for the Attorney General's investigation expenses, with collected fines and remaining registration fees directed towards enforcing various privacy and technology-related laws. This Act is set to take effect on October 1, 2026.

Business and Industry

https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB1220?ys=2026RS