Skip to content

Session Expired

Your session has expired. Please sign in again to continue where you left off.

Sign In Again

MD HB711: Data Privacy - Consumer Data, Public Records, and Message Switching System (Data Privacy Act)

Enacted Maryland

Last verified Oct 4, 2026 · official bill text

HB711 · where it stands

4 of 5 steps complete
  1. Introduced Complete
  2. Passed first chamber Complete
  3. Passed both chambers Complete
  4. Enacted Complete
  5. Effective Date not recorded
What do these statuses mean?
Introduced
Filed in the legislature; may be waiting for a committee hearing.
Passed a chamber
Approved by one or both chambers; awaiting further action.
Enacted
Signed into law, or became law without a signature or over a veto.
Effective date
The date the law says it takes effect. Once it has passed, the page shows "Effective" and the date. A court order can still block a law; if we know of one, the summary says so.
Dead / vetoed
Vetoed, failed, or the session ended without action.

In one paragraph

HB711 prohibits the sale of consumer data to governmental units engaged in civil immigration enforcement unless required by law.

Plain-English summary, written with AI assistance. The official text controls.

What it means for business

If you operate a message switching system, you must implement access controls by July 1, 2024, or face penalties.

What this means

The Data Privacy Act (HB711) in Maryland restricts data controllers from selling personal data to governmental units engaged in civil immigration enforcement unless legally mandated.

Key provisions

  1. Prohibits controllers from knowingly selling consumer data to governmental units engaged in or supporting civil immigration enforcement unless required by law (Article - Commercial Law, -4701).

Latest legislative action

May 31, 2026. Enacted under Article II, Section 17(c) of the Maryland Constitution - Chapter 874

Full analysis

HB711, known as the Data Privacy Act, aims to enhance consumer data protection in Maryland. The bill prohibits data controllers from knowingly selling personal data to governmental units engaged in or supporting civil immigration enforcement unless required by law. Entities operating message switching systems are not specified to implement access controls and audit logs in the bill.

Topics and industries

This page is general information, not legal advice. Summaries are AI-assisted and may contain errors; read the statute for the controlling text and talk to a lawyer about your situation. Full disclaimer · Report an error