Maryland Implements New Privacy Law Affecting State Agencies and Vendors
Maryland has enacted the Maryland Data Privacy and Protection Act of 2026, a new law that significantly alters how state agencies collect, use, and protect residents' personal information. Signed by Governor Wes Moore, the law mandates that data collected by the state should only be used for its intended purpose, emphasizing the inherent right to privacy. It requires state agencies to incorporate data use agreements into procurement contracts with third-party contractors and mandates each government unit to appoint a privacy officer. This legislation is part of a broader trend where states are independently establishing privacy regulations in the absence of a comprehensive federal law. The law aims to modernize data management, cybersecurity, and digital services within the state, ensuring residents maintain control over their data. 
