MD SB629

Establishes that state and higher education employee e-mail systems are intended to support state business and may not serve as a public forum

Defines "spam e-mail" as unsolicited, phishing, solicitation, and bulk e-mails unrelated to state business, excluding legitimate communications from state vendors, partners, and exclusive representatives

Requires state agencies and public higher education institutions to include provisions in their IT policies, plans, and standards that protect employee e-mail services from spam through automatic filtering systems

Permits incidental personal use of state e-mail by employees if it has de minimis impact on resources and is consistent with professional business norms

Takes effect October 1, 2026