MD HB1089

Establishes a Privacy Protection and Enforcement Unit within the Attorney General's Division of Consumer Protection to protect individuals' personal information, digital rights, and privacy from unfair practices involving AI, cybersecurity, and online services

Requires data brokers to register annually with the Comptroller by January 31, providing business information and disclosing whether they collect geolocation data, consumer health data, and whether consumers can opt out of data collection

Imposes a 6% gross income tax on data brokers, with income apportioned to Maryland based on the ratio of Maryland addresses in the personal data to total addresses

Distributes tax revenue to multiple funds: at least $2.5 million each to the Privacy Protection Unit, Information Technology Investment Fund (for AI projects), and Maryland Public Television (for K-12 digital literacy); at least $120 million to the Coordinated Community Supports Partnership Fund; and remaining funds to the Blueprint for Maryland's Future Fund

Applies to taxable years beginning on or after December 31, 2026, with the registry and most provisions taking effect July 1, 2025