Regulates how a controller or processor may process a consumer's personal data.
Authorizes consumer to exercise certain rights in regards to consumer’s personal data.
Controller of personal data to establish method for consumer to exercise certain rights.
Requires controller to comply with a request by a consumer to exercise a certain right.
Authorizes consumer to assign authorized agent to opt out on consumer’s behalf.
Requires controller that uses a processor to process the personal data of consumers to enter into a contract with a processor that governs the data processing procedures.
Controller to conduct a data protection assessment for consumer data processing.
Legislative History
On Jan. 24, 2024, bill introduced in the Senate; on Mar. 14, 2024, bill passed Senate.
On Mar. 15, 2024, bill introduced in the House; on Apr. 4, 2024, bill passed in House.
On Apr. 6, 2024, Senate concurred House amendments, bill was passed enrolled.
Effectiveness
Upon approval by the governor, bill HB 36 is effective on Oct. 1, 2025.
May 2024 MD LEG Governor Approval
On May 9, 2024, MD LEG enacted HB 567 and SB 541, assigned Ch. 454 and Ch. 455.
