In one paragraph
Maryland's SB 936 (2025) would have added Commercial Law sections 14-47A-01 to 14-47A-08 requiring developers and deployers of high-risk AI systems used for consequential decisions to use reasonable care against algorithmic discrimination starting February 1, 2026, with impact assessments, consumer notices and appeals. The Attorney General would enforce, with fines up to $1,000 per violation ($1,000 to $10,000 if willful). A Senate Finance hearing was set for February 27, 2025; the bill went no further and died when the session ended.
Plain-English summary, written with AI assistance. The official text controls.
What it means for business
None: the bill died when the 2025 session ended. If enacted it would have required high-risk AI developers and deployers to assess and disclose discrimination risks.
Key provisions
- Developers (from February 1, 2026) must use reasonable care to protect consumers from known or reasonably foreseeable algorithmic discrimination and give deployers documentation of intended uses, limitations, evaluation and bias mitigation; disclosures updated within 90 days of a substantial modification
- Deployers (from February 1, 2026) must keep a risk management program, complete an impact assessment before deployment and at least 90 days before significant updates, and keep records at least 3 years
- Deployers must notify consumers before a high-risk system is used for a consequential decision, and after an adverse decision give principal reasons, a chance to correct data and appeal, with human review unless not in the consumer's best interest
- Consequential decisions cover parole, education, employment, financial or lending services, health care, housing, insurance, marital status and legal services; developers of generative AI must mark synthetic content
- Attorney General enforces after a 45-day cure opportunity; fines up to $1,000 per violation, $1,000 to $10,000 if willful; each violation is separate; conformity with NIST AI RMF or ISO/IEC 42001 creates a presumption of compliance
- Consumers could sue deployers only after filing an administrative complaint and waiting 180 days, within 2 years; exempts insurers regulated under Title 13 and certain HIPAA covered entities; effective October 1, 2025
Latest legislative action
Feb 6, 2025. Hearing 2/27 at 1:00 p.m.
Sponsors
| Name | Role | District |
|---|---|---|
| Dawn Gile D | Sponsor | SD-033 |
| Katie Hester D | Sponsor | SD-009 |
| Sara Love D | Sponsor | SD-016 |
Topics and industries
Affected industries
This page is general information, not legal advice. Summaries are AI-assisted and may contain errors; read the statute for the controlling text and talk to a lawyer about your situation. Full disclaimer · Report an error