MD HB693

Commercial entities that knowingly distribute obscene material on websites where more than one-third of content is obscene must verify users are at least 18 years old using government-issued ID or transactional data verification methods.

Entities performing age verification are prohibited from retaining any identifying information about users after access has been granted or denied.

Individuals may sue commercial entities that violate these requirements for damages resulting from a minor accessing obscene material or from improper retention of identifying information, with courts authorized to award costs and attorney's fees to prevailing plaintiffs.

Internet service providers, search engines, and cloud service providers are exempt from liability if they are not responsible for creating or communicating the obscene material.

News-gathering organizations and bona fide public interest broadcasts are exempt from the requirements. The law takes effect October 1, 2026.