Maryland 2022 Regular Session

Maryland Senate Bill SB643

Introduced
2/3/22  
Refer
2/3/22  
Report Pass
3/18/22  
Engrossed
3/21/22  
Refer
3/21/22  
Report Pass
4/11/22  
Enrolled
4/11/22  

Caption

Commercial Law - Maryland Personal Information Protection Act - Revisions

Impact

The revisions stipulated by SB643 are poised to strengthen Maryland's framework for data protection, thereby enhancing the overall security landscape. By requiring businesses to create and maintain robust security practices, it not only creates accountability for data protection but also helps to foster consumer trust. Furthermore, the bill modifies the notifications process in the event of a security breach, reducing the notification timeline from 45 days to 10 days in certain circumstances, potentially facilitating quicker consumer response in mitigating risks associated with identity theft.

Summary

SB643, titled the Maryland Personal Information Protection Act Revisions, introduces significant amendments to existing laws overseeing how businesses handle personal information. The bill mandates that any business maintaining personal information of Maryland residents must implement and uphold specific security procedures. This action aims to enhance consumer protection by addressing the rising threat of data breaches and ensuring that affected individuals are notified promptly and adequately when their data is compromised. The law establishes clearer definitions and requirements for handling personal data that are designed to keep pace with technology advancements and evolving threats in the digital age.

Sentiment

The overall sentiment surrounding SB643 has been generally positive, especially among advocates for consumer rights and data protection. Supporters praise the revisions as necessary steps towards safeguarding individuals' personal information from increasing cyber threats. However, there are concerns expressed by certain business sectors regarding the financial implications of compliance and potential liabilities that may arise from data breaches. The sentiment indicates a recognition of the need for enhanced protections coupled with apprehensions regarding costs and operational changes required for compliance.

Contention

Notable points of contention during the discussions around SB643 include the balance between consumer protection and the burden on businesses to comply with enhanced security measures. Critics argue that while the intent to protect consumers is commendable, the additional operational requirements may pose challenges, especially for small businesses that may lack resources to implement complex security protocols. The bill also raises questions about the adequacy of penalties for non-compliance and the clarity of certain definitions related to personal and sensitive information.

Companion Bills

MD HB962

Crossfiled Commercial Law – Maryland Personal Information Protection Act – Revisions

Previously Filed As

MD HB962

Commercial Law – Maryland Personal Information Protection Act – Revisions

MD AB2301

Personal information: data breaches: genetic information.

MD AB825

Personal information: data breaches: genetic data.

MD S39

Protecting sensitive personal information from breaches and other cybersecurity incidents

MD HB664

Court Personnel - Protection of Personal Information (Judge Andrew F. Wilkinson Judicial Security Act)

MD SB575

Court Personnel - Protection of Personal Information (Judge Andrew F. Wilkinson Judicial Security Act)

MD AB1712

Personal information: data breaches.

MD S30

Relative to protecting sensitive information from security breaches

MD H76

Relative to protecting sensitive information from security breaches

MD HB259

Commercial Law - Consumer Protection - Biometric Data Privacy

Similar Bills

MD HB962

Commercial Law – Maryland Personal Information Protection Act – Revisions

MD HB1123

Correctional Services - Geriatric and Medical Parole

MD HB102

Family and Medical Leave Insurance Program - Revisions

MD SB225

Family and Medical Leave Insurance Program – Application Year and Participation of Self–Employed Individuals

MD SB185

Maryland Public Ethics Law - State Officials of and Candidates to be State Officials of the Judicial Branch - Conflicts of Interest and Financial Disclosure Statements

MD HB166

Maryland Public Ethics Law - State Officials of and Candidates to be State Officials of the Judicial Branch - Conflicts of Interest and Financial Disclosure Statements

MD SB366

Employees' and Teachers' Retirement and Pension Systems - Reemployment of Retirees

MD HB1211

Employees' and Teachers' Retirement and Pension Systems - Reemployment of Retirees