WHAT THIS BILL REGULATES · 7 REQUIREMENT TYPES
How Is This Bill Enforced
Verbatim statutory text on the left; plain-language analysis and a per-section checklist on the right. Numbered markers cross-link to the matching checklist row.
(A)–(C) In this subtitle the following words have the meanings indicated. (B) (1) "Facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B)" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. (2) "Facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B)" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information. (C) "Law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C)" has the meaning stated in § 2-101 of the Public Safety Article.
This section defines the two key terms for the subtitle. Facial recognition technology is defined broadly to cover any computer program, service, or technology analyzing facial features for identification, verification, or persistent tracking in still or video images used in criminal investigations. The definition carves out device-unlock technology and privacy-redaction tools that do not retain biometric data. Law enforcement agency incorporates the existing definition from the Public Safety Article.
(A) 1 Except as otherwise provided in this section, results generated by facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) may not be introduced in a criminal proceeding or in a delinquency proceeding under Title 3, Subtitle 8A of the Courts Article.
(B)(1)–(2) 2 Subject to paragraph (2) of this subsection, results generated by facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) may be considered or introduced as evidence in connection with a criminal proceeding only for the purpose of establishing probable cause or positive identification: (I) in connection with the issuance of a warrant; or (II) at a preliminary hearing. (2) (I) Subject to subparagraph (II) of this paragraph, results generated by facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) may not serve as the sole basis to establish probable cause or the positive identification of an individual in a criminal investigation or proceeding. (II) Probable cause or positive identification may be established using facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) only if the results are supported by additional, independently obtained evidence establishing probable cause or a positive identification.
This section establishes strict evidentiary limits on the use of facial recognition technology results in criminal and juvenile proceedings. FRT results are generally inadmissible, with narrow exceptions: they may be used only to establish probable cause or positive identification in connection with a warrant or preliminary hearing, and even then may never serve as the sole basis — independently obtained corroborating evidence is always required. FRT results are categorically barred from criminal trials and adjudicatory hearings.
(A)(1)(I) 3 A police officer or other employee or agent of a law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) may not, in the furtherance of a criminal investigation: (I) use facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) to investigate a crime other than the commission of or the attempt to commit: 1. a crime of violence as defined in § 14-101 of the Criminal Law Article; 2. a human trafficking offense under Title 3, Subtitle 11 of the Criminal Law Article; 3. first- or second-degree child abuse under § 3-601 of the Criminal Law Article; 4. a child pornography offense under § 11-207 of the Criminal Law Article; 5. a hate crime under § 10-304 of the Criminal Law Article; 6. a weapon crime under § 4-102, § 4-103, § 4-203(A)(1)(III) or (IV), § 4-204, or § 4-303(A)(2) of the Criminal Law Article; 7. a weapon crime under § 5-138, § 5-140, § 5-141, § 5-207(C)(16), § 5-406(A)(3), or § 5-703(A) of the Public Safety Article; 8. aggravated cruelty to animals under § 10-606 or § 10-607 of the Criminal Law Article; 9. importation of fentanyl or a fentanyl analogue under § 5-614(A)(1)(XII) of the Criminal Law Article; 10. stalking under § 3-802 of the Criminal Law Article; 11. a criminal act involving circumstances presenting a substantial and ongoing threat to public safety or national security; or 12. a crime under the laws of another state substantially equivalent to a crime listed in items 1 through 10 of this item involving a fugitive from justice charged with a crime in that state and sought under Title 9 of this Article;
(A)(1)(II)–(III) 4 analyze an image or a recording of an individual: 1. engaged in activity protected under the United States Constitution, the Maryland Constitution, or the Maryland Declaration of Rights, unless there is reasonable suspicion to believe that the individual has committed, is in the process of committing, or is about to commit a crime; or 2. who is not intended to be identified; (III) use facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) to analyze a sketch or manually produced image;
(A)(1)(IV) 5 disclose to a witness in the criminal investigation, prior to the witness participating in a live identification or photo array identification, that a particular suspect or image of a suspect was identified using facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B);
(A)(1)(V) 6 use facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) for the purpose of live or real-time identification of an image or a recording.
(A)(2) 7 Except as provided in subparagraph (II) of this paragraph, an image being evaluated using facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) may be compared only to images contained in: 1. the database of images of driver's license and identification card photos maintained by the Motor Vehicle Administration or the Department of Motor Vehicles of another state; or 2. a database of mugshot photos maintained by a local, state, or federal law enforcement agency or a law enforcement agency of another country. (II) An image being evaluated using facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) may be compared to an image contained in a database other than a database described in subparagraph (I) of this paragraph if: 1. the law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) conducting the investigation has entered into an agreement with the entity that maintains the database governing the methods by which images in the database are collected; and 2. the agreement provides that the agreement will be terminated in the event that the entity maintaining the database commits a material breach of the provisions governing the methods by which images in the database are collected.
(A)(3) 8 Before being used for any purpose in relation to a criminal investigation, a result generated by facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) shall be independently verified by an individual who has completed training in accordance with § 2-505 of this subtitle.
(B) 9 A police officer or other employee or agent of a law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) may not use facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) to identify an individual solely based on: (1) the police officer's, employee's, or agent's personal interest not related to legitimate duties or objectives of the law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C); (2) the individual's political or social beliefs or activities; (3) the individual's participation in lawful activities; or (4) the individual's race, color, religious beliefs, sexual orientation, gender, disability, national origin, or status as being homeless.
(C)(1)–(3) Except as provided in paragraph (2) of this subsection and subject to paragraph (3) of this subsection, a result generated by facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) in violation of this section and all other evidence subsequently derived from the result may not be introduced by the State for any purpose in a criminal court proceeding or in a juvenile court proceeding under Title 3, Subtitle 8A of the Courts Article. (2) Evidence derived from a result generated in violation of subsection (A)(1) of this section may be introduced for a purpose described in § 2-502 of this subtitle if the court finds that the evidence would otherwise be subject to a legally valid exception to the exclusionary rule. (3) This subsection may not be construed to allow the use of a result generated using facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) to be introduced as evidence in a criminal trial or in an adjudicatory hearing held under § 3-8A-18 of the Courts Article.
This section is the operational core of the statute, imposing detailed restrictions on how law enforcement may use facial recognition technology. It limits FRT to investigations of enumerated serious crimes, prohibits analyzing images of persons engaged in constitutionally protected activity absent reasonable suspicion, bars use on sketches or manually produced images, prohibits disclosing FRT-generated suspect identifications to witnesses before lineups, and categorically prohibits real-time identification. Comparison databases are restricted to driver's license/ID photos and law enforcement mugshots, with an exception for other databases only under a written agreement with termination-for-breach provisions. All FRT results must be independently verified by a trained individual before investigative use. The section also prohibits use of FRT based on personal interest, political beliefs, lawful activities, or protected characteristics. Violations trigger an exclusionary rule, subject to a narrow exception for evidence that would qualify under a legally valid exception to the exclusionary rule.
10 The State shall disclose, in accordance with the Maryland Rules regarding discovery, whether facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) has been used in an investigation relevant to a criminal court proceeding or juvenile court proceeding under Title 3, Subtitle 8A of the Courts Article, the name of each facial recognition system used, a description and the names of the databases searched, and all results generated from the use of the facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) that led to further investigative action for each facial recognition system and for each database searched.
This section requires the State to disclose in discovery whether facial recognition technology was used in an investigation relevant to a criminal or juvenile proceeding. The disclosure must include the name of each FRT system used, a description and names of the databases searched, and all results that led to further investigative action. This is a criminal-procedure transparency obligation ensuring defendants can challenge FRT-derived evidence.
(A) 11 A law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) that uses or contracts for the use of facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) shall designate an employee of the law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) to be responsible for overseeing and administering the use of facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) in compliance with this subtitle as well as applicable local laws, regulations, and policies.
(B)(1)–(2) 12 On or before October 1 each year, a law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) that uses or contracts for the use of facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) shall complete an audit to determine compliance with this subtitle as well as applicable local laws, regulations, and policies. (2) The results of the audit conducted under this subsection, including any records, data, papers, or materials evaluated as part of the audit, shall be: (I) maintained by the law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) for at least 3 years after completion of the audit, after which the law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) may destroy all audit materials; and (II) unless all audit materials have been destroyed in accordance with item (I) of this paragraph, disclosed if requested by: 1. the Attorney General; 2. the Public Defender; 3. a State's Attorney; 4. a United States Attorney; or 5. a designee of an individual described in items 1 through 4 of this item.
(C) 13 A police officer or other employee or agent of a law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) authorized to use facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) in the course of criminal investigations shall annually complete training administered by the Department of Public Safety and Correctional Services under § 2-506 of this subtitle.
This section imposes three governance obligations on law enforcement agencies using FRT. First, each agency must designate an employee responsible for overseeing and administering FRT use in compliance with the subtitle. Second, agencies must complete an annual compliance audit by October 1, retain audit materials for at least 3 years, and disclose them upon request to the Attorney General, Public Defender, State's Attorneys, United States Attorneys, or their designees. Third, authorized personnel must annually complete FRT training administered by the Department of Public Safety and Correctional Services.
(A)–(B) 14 The Department of State Police, in consultation with any other relevant state agency, shall adopt and publish a model statewide policy regarding the use of facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B). (B) A law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) may not use or contract for the use of facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) for use in criminal investigations unless the use is in accordance with the model statewide policy regarding the use of facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) adopted and published under subsection (A) of this section.
(C)(1)–(2) 15 On or before June 30, 2026, the Department of Public Safety and Correctional Services shall develop and administer a training program regarding the use of facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) in the course of criminal investigations, including training on cultural diversity and implicit bias. (2) In developing the training program required under paragraph (1) of this subsection, the Department shall evaluate the availability and relevance of any proficiency testing regarding the use of facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) in the course of criminal investigations.
This section requires the Department of State Police to adopt and publish a model statewide policy for FRT use and prohibits any law enforcement agency from using FRT unless in accordance with that model policy. The Department of Public Safety and Correctional Services must develop and administer a training program by June 30, 2026, including cultural diversity and implicit bias components, and must evaluate the availability of proficiency testing for FRT use.
(1)–(5) This subtitle may not be construed to restrict the use of facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) for the purpose of: (1) identifying a missing or deceased person or a person who is incapacitated and unable to otherwise provide the person's own identity; (2) redacting a recording or an image for release or disclosure to protect the privacy of an individual depicted in a recording or an image; (3) forensic analysis of electronic media seized by law enforcement in relation to a specific investigation if the person identified in the electronic media is not the subject of criminal charges resulting from the forensic analysis; (4) enhancing security systems for preventing unauthorized access to information, goods, materials, areas, or other properties under the custody or care of a law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C); or (5) conducting otherwise legitimate activity unrelated to a criminal investigation.
This section is a savings clause clarifying that the subtitle does not restrict FRT use for five categories of activity: identifying missing, deceased, or incapacitated persons; privacy redaction; forensic analysis of seized electronic media (where the identified person is not charged); physical security of law enforcement property; and otherwise legitimate non-criminal-investigation activity.
(A)–(B) 16 A law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) that uses facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) shall adopt and maintain a use and data management policy. (B) A law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) that develops a policy under subsection (A) of this section shall post a copy of the policy on the agency's public website.
(C) 17 A law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) that contracts for use of a nongovernment facial recognition system shall disclose on its public website the name of the system and the names and a description of the databases searched.
This section requires every law enforcement agency using FRT to adopt and maintain a use and data management policy and to post it publicly on the agency's website. Agencies contracting for non-government FRT systems must also disclose on their website the system name and the names and descriptions of databases searched. Together, these provisions ensure public visibility into how each agency governs and deploys FRT.
A person may bring a civil action against a law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) to compel compliance with this subtitle.
This section creates a private right of action permitting any person to bring a civil action against a law enforcement agency to compel compliance with the subtitle. No monetary damages are specified — the remedy is injunctive in nature.
(A)(1)–(5) 18 On or before February 1 each year, a law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) using or contracting for the use of facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) shall prepare and publish an annual report that discloses information for the prior calendar year, including: (1) the name of each facial recognition system and the names and a description of the databases searched; (2) for each facial recognition system, the total number of facial recognition searches performed by the law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) and the type of crime or incident associated with each use; (3) the total number of possible matches returned that led to further investigative action for each facial recognition system and for each database searched including the age, race, and gender of individuals connected to the possible matches returned if the information is available from the government records searched; and (4) any data breaches or unauthorized uses of facial recognition technologyFacial recognition technology"Facial recognition technology" means a computer program, a service, or any other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) under the law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C)'s control; and (5) for each search using a facial recognition system documented under items (2) and (3) of this subsection, the age, race, and gender of individuals connected to the searches performed or possible matches returned.
(B)–(C) 19 On or before May 1 each year, a law enforcement agencyLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) required to prepare a report under subsection (A) of this section shall submit the report to the Governor's Office of Crime Prevention, Youth, and Victim Services. (C) On or before October 1 each year, the Governor's Office of Crime Prevention, Youth, and Victim Services shall submit to the Governor and, in accordance with § 2-1257 of the State Government Article, the General Assembly a report consisting of the information reported by law enforcement agencies under subsection (B) of this section, disaggregated by agency.
This section requires each law enforcement agency using FRT to prepare and publish by February 1 an annual report covering the prior calendar year. The report must disclose the name of each FRT system and databases searched, total search counts by crime type, match counts with demographic breakdowns, data breaches or unauthorized uses, and demographic data for all searches and matches. Reports must be submitted to the Governor's Office of Crime Prevention, Youth, and Victim Services by May 1, which in turn must compile and transmit them to the Governor and General Assembly by October 1.