MD HB1220

Establishes a data broker registry administered by the Maryland Comptroller, requiring businesses that collect, sell, or license personal data about Maryland residents to register annually by January 31

Data brokers must disclose whether they collect precise geolocation or consumer health data, and must describe opt-out options available to residents for their brokered personal data

Registration fees will be set by the Comptroller to cover program administration costs, with excess funds directed to the Attorney General for enforcement of privacy laws

Exempts consumer reporting agencies regulated under the Fair Credit Reporting Act, financial institutions subject to Gramm-Leach-Bliley Act, and businesses with direct customer relationships from the definition of "data broker"

Non-compliant data brokers face $200 per day fines plus investigation costs, with the Comptroller required to publish registry information publicly and report annually to the Governor and General Assembly starting December 31, 2027