Maryland legislation · 2026 Regular Session
Maryland HB711: Data Privacy - Consumer Data, Public Records, and Message Switching System (Data Privacy Act)
Status: Signed into law, May 31, 2026
Prohibiting a certain controller from knowingly selling the personal data of a consumer to a certain governmental unit that has engaged in or supported civil immigration enforcement under certain circumstances; requiring a custodian of a public record to take reasonable steps to determine whether a public record is accessed for enforcing immigration law; requiring an entity that operates a certain message switching system to take certain actions regarding system access; etc.
What the bill says
An act concerning Data Privacy - Consumer Data, Public Records, and Message Switching System (Data Privacy Act) FOR the purpose of prohibiting a certain controller from knowingly selling the personal data of a consumer if the controller knew or should have known that the purchaser seeks to use the data for immigration enforcement to a certain governmental unit that has engaged in or supported civil immigration enforcement under certain circumstances…
From the enrolled text, June 3, 2026:
AN ACT concerning Data Privacy - Consumer Data, Public Records, and Message Switching System (Data Privacy Act) FOR the purpose of prohibiting a certain controller from knowingly selling the personal data of a consumer if the controller knew or should have known that the purchaser seeks to use the data for immigration enforcement to a certain governmental unit that has engaged in or supported civil immigration enforcement under certain circumstances; altering the manner in which certain provisions of law may be construed with respect to a controller's or processor's compliance with governmental actions; requiring a custodian of a public record to adopt reasonable rules and regulations that prevent unauthorized disclosure or inspection of a public record, and to take reasonable steps to determine whether a public record is accessed for enforcing immigration law; altering the reasons for which a public record may be denied from being disclosed or inspected; requiring an entity that operates a certain message switching system to take certain actions regarding system access; requiring certain procedures developed and published by certain governmental entities to account for certain sensitive data containing certain sensitive attributes; and generally relating to data privacy of individuals in the State. BY repealing and reenacting, without amendments, Article - Commercial Law Section 14-4701(a), (w), and (y) and (w) Annotated Code of Maryland (2025 Replacement …