MD SB889

Prohibits intentionally distributing personal identifying information or images of students enrolled in secondary schools (grades 6-12) or postsecondary institutions without the student's express permission (or parent/guardian permission if under 18)

Applies only when distribution is done with intent or knowledge that the information will be used to harm the student, or with reckless disregard for that risk

"Harm" is defined as physical injury, serious emotional distress, or economic damages

Protected information includes name, address, phone number, Social Security number, date of birth, biometric data, financial account numbers, and school address, among other identifiers

Violation is a misdemeanor punishable by up to 1 year imprisonment, a fine up to $5,000, or both; effective October 1, 2025