MD HB394

Commercial entities distributing obscene material on websites where such material constitutes more than one-third of total content must implement age verification using government-issued ID or transactional data to confirm users are at least 18 years old

Entities performing age verification are prohibited from retaining any identifying information about users after access has been granted or denied

Individuals may sue commercial entities for damages if a minor accesses obscene material or if the entity improperly retains identifying information, with courts authorized to award attorney's fees to prevailing plaintiffs

Internet service providers, search engines, and cloud service providers are exempt from liability when merely providing access or connection to content they did not create

News organizations and bona fide public interest broadcasts are exempt from the requirements; effective date is October 1, 2025