EXPLANATION: CAPITALS INDICATE MAT TER ADDED TO EXISTIN G LAW. [Brackets] indicate matter deleted from existing law. *sb0851* SENATE BILL 851 K3, E4 2lr2652 By: Senator Carter (By Request – Baltimore City Administration) Introduced and read first time: February 7, 2022 Assigned to: Finance A BILL ENTITLED AN ACT concerning 1 Labor and Employment – User Name and Password Privacy – Law Enforcement 2 Agency Exemption 3 FOR the purpose of exempting certain law enforcement agencies from the prohibition 4 against employers requiring employees or applicants to disclose the means for 5 accessing a personal account or service through an electronic communications device; 6 and generally relating to user name and password privacy and law enforcement 7 agencies. 8 BY repealing and reenacting, with amendments, 9 Article – Labor and Employment 10 Section 3–712 11 Annotated Code of Maryland 12 (2016 Replacement Volume and 2021 Supplement) 13 BY repealing and reenacting, without amendments, 14 Article – Public Safety 15 Section 3–201(a) and (d) 16 Annotated Code of Maryland 17 (2018 Replacement Volume and 2021 Supplement) 18 SECTION 1. BE IT ENACTED BY THE GENERAL ASSEMBLY OF MARYLAND, 19 That the Laws of Maryland read as follows: 20 Article – Labor and Employment 21 3–712. 22 (a) (1) In this section the following words have the meanings indicated. 23 (2) “Applicant” means an applicant for employment. 24 2 SENATE BILL 851 (3) (i) “Electronic communications device” means any device that uses 1 electronic signals to create, transmit, and receive information. 2 (ii) “Electronic communications device” includes computers, 3 telephones, personal digital assistants, and other similar devices. 4 (4) (i) “Employer” means: 5 1. a person engaged in a business, an industry, a profession, 6 a trade, or other enterprise in the State; or 7 2. a unit of State or local government. 8 (ii) “Employer” includes an agent, a representative, and a designee 9 of the employer. 10 (III) “EMPLOYER” DOES NOT INCLUDE A LAW ENFORCEMENT 11 AGENCY AS DEFINED IN § 3–201 OF THE PUBLIC SAFETY ARTICLE. 12 (b) (1) Subject to paragraph (2) of this subsection, an employer may not 13 request or require that an employee or applicant disclose any user name, password, or other 14 means for accessing a personal account or service through an electronic communications 15 device. 16 (2) An employer may require an employee to disclose any user name, 17 password, or other means for accessing nonpersonal accounts or services that provide 18 access to the employer’s internal computer or information systems. 19 (c) An employer may not: 20 (1) discharge, discipline, or otherwise penalize or threaten to discharge, 21 discipline, or otherwise penalize an employee for an employee’s refusal to disclose any 22 information specified in subsection (b)(1) of this section; or 23 (2) fail or refuse to hire any applicant as a result of the applicant’s refusal 24 to disclose any information specified in subsection (b)(1) of this section. 25 (d) An employee may not download unauthorized employer proprietary 26 information or financial data to an employee’s personal Web site, an Internet Web site, a 27 Web–based account, or a similar account. 28 (e) This section does not prevent an employer: 29 (1) based on the receipt of information about the use of a personal Web site, 30 Internet Web site, Web–based account, or similar account by an employee for business 31 SENATE BILL 851 3 purposes, from conducting an investigation for the purpose of ensuring compliance with 1 applicable securities or financial law, or regulatory requirements; or 2 (2) based on the receipt of information about the unauthorized 3 downloading of an employer’s proprietary information or financial data to a personal Web 4 site, Internet Web site, Web–based account, or similar account by an employee, from 5 investigating an employee’s actions under subsection (d) of this section. 6 (f) (1) Whenever the Commissioner determines that this section has been 7 violated, the Commissioner shall: 8 (i) try to resolve any issue involved in the violation informally by 9 mediation; or 10 (ii) ask the Attorney General to bring an action on behalf of the 11 applicant or employee. 12 (2) The Attorney General may bring an action under this subsection in the 13 county where the violation allegedly occurred for injunctive relief, damages, or other relief. 14 Article – Public Safety 15 3–201. 16 (a) In this subtitle the following words have the meanings indicated. 17 (d) (1) “Law enforcement agency” means a governmental police force, sheriff’s 18 office, or security force or law enforcement organization of the State, a county, or a 19 municipal corporation that by statute, ordinance, or common law is authorized to enforce 20 the general criminal laws of the State. 21 (2) “Law enforcement agency” does not include members of the Maryland 22 National Guard who: 23 (i) are under the control and jurisdiction of the Military 24 Department; 25 (ii) are assigned to the military property designated as the Martin 26 State Airport; and 27 (iii) are charged with exercising police powers in and for the Martin 28 State Airport. 29 SECTION 2. AND BE IT FURTHER ENACTED, That this Act shall take effect 30 October 1, 2022. 31