Home › AI Laws › Maryland › Baltimore
AI Laws in Baltimore, Maryland
As of 2026-06-17, AI Laws USA tracks 24 AI rules that apply to people and businesses in Baltimore, Maryland: 10+ federal protections, 11 Maryland state-level rules, and 3 local Baltimore ordinances. Coverage is strongest on automated decision-making, consumer protection, consumer data privacy, and AI disclosure and transparency. 10 of these rules are already in effect. Each entry below links to its official source.
Baltimore local AI rules
3 local AI rules specific to Baltimore, Maryland.
-
Expired Unknown
Baltimore FR Ban (Expired)
Baltimore, MD · Effective 2021-09-08 · Baltimore, Md., Council Bill 21-0001 (2021) (expired Dec. 31, 2022)
Baltimore's 2021 ordinance banned private entities and individuals (and most city agencies) from using face surveillance systems, with criminal penalties. It contained a sunset clause and EXPIRED on December 31, 2022 when the City Council did not extend it. As of June 2026 the ban is no longer in effect; 2023 successor bills were not confirmed as enacted.
-
In effect Moderate protection
Baltimore Aerial Surveillance Ord.
Baltimore, MD · Effective 2022-09-01 · Balt. City Council Bill No. 22-0249 (2022)
Baltimore ordinance prohibiting aerial surveillance programs of the Persistent Surveillance Systems type by Baltimore Police, including AI-based pattern-of-life analytics on aerial imagery.
-
Proposed / pending Proposed or pending
Baltimore GenAI Policy (proposed)
Baltimore, MD · Balt. City Council Bill No. 24-0411 (proposed)
Proposed Baltimore ordinance directing the Mayor's Office of Information Technology to publish a binding generative AI use policy for city employees.
Maryland-level AI rules most relevant to Baltimore
11 Maryland state rules apply to residents and businesses in Baltimore. Showing the 8 most relevant to Baltimore's local picture; 3 more are on the Maryland jurisdiction page.
-
In effect Limited protection
Maryland Online Data Privacy Act
Maryland · Effective 2025-10-01 · 2024 Md. Laws ch. 440 (SB 541); Md. Code Ann., Com. Law §§ 14-4601–14-4626
Maryland's privacy law is stricter than most: it prohibits processing sensitive personal data unless strictly necessary for the requested service. Consumers can access, correct, delete, and port their data, and opt out of automated profiling and targeted advertising. AG enforcement began April 2026.
-
In effect Limited protection
Maryland HB 1563 (AI-denial reporting)
Maryland · Effective 2026-06-01 · 2026 Md. Laws ch. 165 (HB 1563); Md. Code, Ins. 15-10A-06
Among other emergency-room and post-acute care provisions, this law expands the quarterly report that carriers must submit to the Maryland Insurance Commissioner. The report must include the number of adverse decisions and whether an artificial intelligence, algorithm, or other software tool was used in making them. The Commissioner may use this information as a basis for examining the carrier.
-
Enacted (not yet in effect) Limited protection
Maryland Predatory Pricing Act (surveillance pricing)
Maryland · Effective 2026-10-01 · 2026 Md. Laws ch. 154 (HB 895)
This law bars food retailers and third-party delivery service providers from using a consumer's personal data or dynamic (surveillance) pricing to set a higher price for tax-exempt food for a specific consumer. It also prohibits using protected-class data to offer, advertise, or sell goods in a way that withholds an accommodation or advantage from the consumer the data pertains to. Violations are treated as unfair, abusive, or deceptive trade practices under the Maryland Consumer Protection Act.
-
In effect Limited protection
MD DOI AI Bulletin
MD · Effective 2024-04-22 · Maryland Insurance Administration Bulletin 24-11 (2024-04-22)
The MD Department of Insurance adopted the NAIC Model Bulletin on Use of Artificial Intelligence Systems by Insurers. Insurers licensed in MD must maintain a written AI program with governance, risk-management, testing, third-party-AI oversight, and documentation controls. The bulletin operationalizes existing unfair-trade-practice and unfair-discrimination law as applied to insurers' AI use cases — underwriting, pricing, claims, fraud detection, and marketing.
-
In effect Limited protection
Maryland AI Governance Act (2024)
Maryland · Effective 2024-07-01 · 2024 Md. Laws ch. 496 (SB 818)
This law sets up a governance framework for how Maryland state government builds, buys, deploys, and uses artificial intelligence. Each state government unit must inventory the systems it uses that employ high-risk AI and conduct regular impact assessments. The Department of Information Technology is directed to develop and adopt policies covering the development, procurement, deployment, use, and ongoing assessment of high-risk AI systems.
-
In effect Moderate protection
Maryland HB 820 (AI in insurance utilization review)
Maryland · Effective 2025-10-01 · 2025 Md. Laws ch. 747 (HB 820); Md. Code, Ins. 15-10A-06, 15-10B-05.1
When a Maryland carrier, pharmacy benefits manager, or private review agent uses artificial intelligence or an algorithm in utilization review, the tool's determinations must be based on the individual patient's clinical history, not solely on a group dataset. The AI may not replace the role of the reviewing provider, must not result in unfair discrimination, must remain open to audit, and may not deny, delay, or modify care in a way that harms enrollees. Carriers must report to the Insurance Commissioner quarterly on adverse decisions, including whether AI was used.
-
Enacted (not yet in effect) Moderate protection
Maryland SB 8 (AI/deepfake impersonation)
Maryland · Effective 2026-10-01 · 2026 Md. Laws ch. 445 (SB 8)
This law makes it a crime to intentionally use artificial intelligence or a deepfake representation to impersonate, falsely depict, or claim to represent another person, or to create or distribute false records, with intent to cause harm, to induce someone to hand over personal identifying information, or to obtain a benefit, credit, good, service, or other thing of value. 'Deepfake representation' means synthetic media indistinguishable from an actual, identifiable human being, and a victim may bring a civil action.
-
In effect Moderate protection
MD EO 01.01.2024.02
MD · Effective 2024-01-08 · Md. Exec. Order No. 01.01.2024.02 (Jan. 8, 2024)
Governor Moore's EO 01.01.2024.02 establishes values-based principles and an AI Subcabinet to coordinate ethical AI use across Maryland state government.
Federal AI rules that apply in Baltimore, Maryland
These federal protections apply everywhere in the United States, including Baltimore, Maryland. Showing the 10 strongest and most recent.
-
In effect Stronger protection
Bartz v. Anthropic
N.D. Cal. · Effective 2025-09-05 · Bartz v. Anthropic PBC, No. 3:24-cv-05417 (N.D. Cal.)
Authors Andrea Bartz, Charles Graeber, and Kirk Wallace Johnson sued Anthropic over its use of pirated-book datasets to train Claude. In June 2025 Judge William Alsup issued a split ruling: training on lawfully purchased books was fair use, but ingesting pirated copies from LibGen was not. In September 2025 Anthropic agreed to a $1.5 billion class settlement — the largest AI copyright recovery to date.
-
In effect Stronger protection
Banner v. Tesla (Autopilot)
S.D. Fla. · Effective 2025-08-01 · Banner v. Tesla, Inc., No. 1:21-cv-21940 (S.D. Fla. Aug. 1, 2025)
A Florida federal jury found Tesla 33% liable in August 2025 for the 2019 death of Naibel Benavides Leon, in a crash involving Autopilot. The verdict awarded $243M (later reduced to ~$220M) — the first Autopilot wrongful-death verdict against Tesla.
-
In effect Stronger protection
COPPA + 2025 Rule (childrens data)
United States · Effective 2025-06-23 · 15 U.S.C. §§ 6501–6506; 16 C.F.R. Part 312
COPPA requires online services aimed at children under 13 to get verifiable parental consent before collecting kids' personal data. The 2025 rule update — fully in effect since April 22, 2026 — adds biometric identifiers (like face templates and voiceprints, which matter for AI tools), requires separate parental consent before sharing children's data for targeted advertising, and tightens data retention limits.
-
In effect Stronger protection
TAKE IT DOWN Act
United States · Effective 2025-05-19 · Pub. L. No. 119-12 (S. 146)
Makes it a federal crime to knowingly publish intimate images of someone without consent, including AI-generated deepfakes. Social media and similar platforms must give victims a way to request removal and must take the content (and known copies) down within 48 hours. The platform removal requirement became enforceable May 19, 2026, and the FTC has already begun enforcement.
-
In effect Stronger protection
Thaler v. Perlmutter (Copyright)
D.C. Cir. · Effective 2025-03-18 · Thaler v. Perlmutter, 130 F.4th 1039 (D.C. Cir. 2025)
The companion copyright case: Stephen Thaler sought to register a copyright with 'Creativity Machine' (his AI) as the author. The D.C. Circuit affirmed in March 2025 that the Copyright Act's human-authorship requirement is constitutional and dispositive. AI cannot be a copyright author under U.S. law.
-
In effect Stronger protection
Thomson Reuters v. Ross
D. Del. · Effective 2025-02-11 · Thomson Reuters Enterprise Centre GmbH v. Ross Intelligence, Inc., 694 F. Supp. 3d 467 (D. Del. 2025)
Thomson Reuters sued legal-research startup Ross Intelligence in 2020 for copying Westlaw headnotes to train a competing AI legal-research tool. In February 2025, Judge Stephanos Bibas (sitting by designation) granted summary judgment to Thomson Reuters on direct copyright infringement and rejected Ross's fair-use defense — the first definitive U.S. ruling on AI-training fair use. The 2023 jury trial verdict had been deadlocked; the 2025 ruling resolved liability.
-
In effect Stronger protection
Louis v. SafeRent
D. Mass. · Effective 2024-11-20 · Louis v. SafeRent Solutions, LLC, No. 1:22-cv-10800 (D. Mass.)
SafeRent agreed in November 2024 to a $2.275M settlement and a five-year ban on using its 'SafeRent Score' for housing-voucher applicants, after a class action alleged its AI tenant-screening tool systematically denied housing to Black and Hispanic Section 8 voucher holders. The first major AI tenant-screening Fair Housing Act settlement.
-
In effect Stronger protection
NetChoice v. Yost (Ohio)
S.D. Ohio · Effective 2024-04-30 · NetChoice, LLC v. Yost, No. 2:24-cv-00047 (S.D. Ohio Apr. 30, 2024)
Ohio's Social Media Parental Notification Act — requiring parental consent for minors' social-media use, including algorithmic feeds — was permanently enjoined as unconstitutional in April 2024.
-
In effect Stronger protection
FTC Impersonation Rule (AI)
United States · Effective 2024-04-01 · 16 C.F.R. Part 461; 89 Fed. Reg. 15017
The FTC's Impersonation Rule lets the agency directly sue scammers who pretend to be a government agency or a real business — including those who use AI-cloned voices or generated images to do so. Civil penalties can reach $53,088 per violation. The FTC also issued a supplemental notice in February 2024 proposing to extend the rule to all individual impersonation.
-
In effect Stronger protection
TCPA (AI voice calls)
United States · Effective 2024-02-08 · 47 U.S.C. § 227; FCC 24-17
Robocalls using AI-cloned or AI-generated voices are treated like other 'artificial voice' calls: callers need your prior express consent, must identify themselves, and must offer opt-outs for telemarketing. You can personally sue violators for $500 to $1,500 per illegal call.
Frequently asked questions about AI laws in Baltimore, Maryland
Are there AI laws in Baltimore, Maryland?
What federal AI rules apply in Baltimore?
Does Maryland have an AI privacy law?
Are deepfakes illegal in Maryland?
Can my employer use AI to screen me for jobs in Baltimore?
How do I report an AI law violation in Baltimore?
Are facial recognition cameras allowed in Baltimore?
Is Baltimore regulated by Maryland's consumer privacy act?
Have we missed an AI rule in Baltimore?
This page is generated from our open civic dataset. If you know of a Baltimore ordinance, county rule, or local enforcement action we should add, email [email protected] or submit a correction. Every entry must include a verifiable source.