Maryland legislation · 2026 Regular Session
Maryland SB569: Commercial Law - Online Data Privacy - Limits on Data Collection
Status: In committee, February 4, 2026
Altering certain requirements for a controller relating to the collection of personal data; and prohibiting a controller, unless consumer consent is obtained, from collecting, processing, sharing, or selling precise geolocation data for the purpose of targeted advertising.
What the bill says
A bill ENTITLED AN ACT concerning Commercial Law - Online Data Privacy - Limits on Data Collection FOR the purpose of altering certain requirements for a controller relating to the collection of personal data; and generally relating to the collection and processing of personal data. BY repealing and reenacting, without amendments, Article - Commercial Law Section 14-4701(a) and (k) Annotated Code of Maryland (2025 Replacement Volume) BY repealing and reenacting, with amendments, Article - Commercial Law Section 14-4701(y) and 14-4707(a) Annotated Code of Maryland (2025 Replacement Volume).
From the introduced text, February 4, 2026:
A BILL ENTITLED AN ACT concerning Commercial Law - Online Data Privacy - Limits on Data Collection FOR the purpose of altering certain requirements for a controller relating to the collection of personal data; and generally relating to the collection and processing of personal data. BY repealing and reenacting, without amendments, Article - Commercial Law Section 14-4701(a) and (k) Annotated Code of Maryland (2025 Replacement Volume) BY repealing and reenacting, with amendments, Article - Commercial Law Section 14-4701(y) and 14-4707(a) Annotated Code of Maryland (2025 Replacement Volume) SECTION 1. BE IT ENACTED BY THE GENERAL ASSEMBLY OF MARYLAND, That the Laws of Maryland read as follows: Article - Commercial Law 14-4701. (a) In this subtitle the following words have the meanings indicated. (k) "Controller" means a person that, alone or jointly with others, determines the purpose and means of processing personal data. EXPLANATION: CAPITALS INDICATE MATTER ADDED TO EXISTING LAW. [Brackets] indicate matter deleted from exist in g l aw . *sb0569* SENATE BILL (y) (1) "Process" means an operation or set of operations performed by manual or automated means on personal data. (2) "Process" includes collecting, using, storing, disclosing, analyzing, [deleting,] or modifying personal data. (3) "PROCESS" DOES NOT INCLUDE DELETING PERSONAL DATA OR EFFORTS MADE TO IDENTIFY PERSONAL DATA SOLELY FOR THE PURPOSE OF DELETION OR DATA MINIMIZATION. …