WHAT THIS BILL REGULATES · 6 REQUIREMENT TYPES
How Is This Bill Enforced
Verbatim statutory text on the left; plain-language analysis and a per-section checklist on the right. Numbered markers cross-link to the matching checklist row.
(A)–(C) IN THIS SUBTITLE THE FOLLOWING WORDS HAVE THE MEANINGS INDICATED. (B) (1) "FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B)" MEANS A COMPUTER PROGRAM, SERVICE, OR OTHER TECHNOLOGY THAT ANALYZES FACIAL FEATURES AND IS USED BY OR AT THE DIRECTION OF A LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) FOR THE IDENTIFICATION, VERIFICATION, OR PERSISTENT TRACKING OF INDIVIDUALS IN STILL OR VIDEO IMAGES FOR USE IN CRIMINAL INVESTIGATIONS. (2) "FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B)" DOES NOT INCLUDE TECHNOLOGY: (I) USED ONLY FOR THE ANALYSIS OF FACIAL FEATURES TO GRANT OR DENY ACCESS TO AN ELECTRONIC DEVICE; OR (II) THAT USES AN AUTOMATED OR SEMIAUTOMATED PROCESS ONLY FOR THE PURPOSE OF REDACTING A RECORDING OR AN IMAGE FOR RELEASE OR DISCLOSURE OUTSIDE A LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) TO PROTECT THE PRIVACY OF A SUBJECT DEPICTED IN THE RECORDING OR IMAGE IF THE PROCESS DOES NOT GENERATE OR RESULT IN THE RETENTION OF ANY BIOMETRIC DATA OR SURVEILLANCE INFORMATION. (C) "LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C)" HAS THE MEANING STATED IN § 2–101 OF THE PUBLIC SAFETY ARTICLE.
Section 2-501 establishes the definitions that govern the entire subtitle. Facial recognition technology is defined broadly as any computer program, service, or technology that analyzes facial features and is used by or at the direction of a law enforcement agency for identification, verification, or persistent tracking in criminal investigations. Two carve-outs exclude device-access authentication and privacy-protective redaction tools that do not retain biometric data.
(A) 1 EXCEPT AS OTHERWISE PROVIDED IN THIS SECTION, RESULTS GENERATED BY FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) MAY NOT BE INTRODUCED IN A CRIMINAL PROCEEDING OR IN A DELINQUENCY PROCEEDING UNDER TITLE 3, SUBTITLE 8A OF THE COURTS ARTICLE.
(B)(1)–(2) 1 SUBJECT TO PARAGRAPH (2) OF THIS SUBSECTION, RESULTS GENERATED BY FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) MAY BE CONSIDERED OR INTRODUCED AS EVIDENCE IN CONNECTION WITH A CRIMINAL PROCEEDING ONLY FOR THE PURPOSE OF ESTABLISHING PROBABLE CAUSE OR POSITIVE IDENTIFICATION: (I) IN CONNECTION WITH THE ISSUANCE OF A WARRANT; OR (II) AT A PRELIMINARY HEARING. (2) (I) SUBJECT TO SUBPARAGRAPH (II) OF THIS PARAGRAPH, RESULTS GENERATED BY FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) MAY NOT SERVE AS THE SOLE BASIS TO ESTABLISH PROBABLE CAUSE OR THE POSITIVE IDENTIFICATION OF AN INDIVIDUAL IN A CRIMINAL INVESTIGATION OR PROCEEDING. (II) PROBABLE CAUSE OR POSITIVE IDENTIFICATION MAY BE ESTABLISHED USING FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) ONLY IF THE RESULTS ARE SUPPORTED BY ADDITIONAL, INDEPENDENTLY OBTAINED EVIDENCE ESTABLISHING PROBABLE CAUSE OR A POSITIVE IDENTIFICATION.
Section 2-502 establishes the evidentiary boundaries for facial recognition results in Maryland courts. Results are categorically excluded from criminal trials and delinquency adjudicatory hearings. They may be introduced only to establish probable cause or positive identification in connection with warrant issuance or at a preliminary hearing — and even then, results may never serve as the sole basis for probable cause or identification. Independent, corroborating evidence is always required.
(A)(1)(I) 2 A POLICE OFFICER OR OTHER EMPLOYEE OR AGENT OF A LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) MAY NOT, IN THE FURTHERANCE OF A CRIMINAL INVESTIGATION: (I) USE FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) TO INVESTIGATE A CRIME OTHER THAN THE COMMISSION OF OR THE ATTEMPT TO COMMIT: 1. A CRIME OF VIOLENCE AS DEFINED IN § 14–101 OF THE CRIMINAL LAW ARTICLE; 2. A HUMAN TRAFFICKING OFFENSE UNDER TITLE 3, SUBTITLE 11 OF THE CRIMINAL LAW ARTICLE; 3. FIRST OR SECOND DEGREE CHILD ABUSE UNDER § 3–601 OF THE CRIMINAL LAW ARTICLE; 4. A CHILD PORNOGRAPHY OFFENSE UNDER § 11–207 OF THE CRIMINAL LAW ARTICLE; 5. A HATE CRIME UNDER § 10–304 OF THE CRIMINAL LAW ARTICLE; 6. A WEAPON CRIME UNDER § 4–102, § 4–103, § 4–203(A)(1)(III), § 4–203(A)(1)(IV), § 4–204, OR § 4–303(A)(2) OF THE CRIMINAL LAW ARTICLE; 7. A WEAPON CRIME UNDER § 5–138, § 5–140, § 5–141, § 5–207(C)(16), § 5–406(A)(3), OR § 5–703(A) OF THE PUBLIC SAFETY ARTICLE; 8. AGGRAVATED CRUELTY TO ANIMALS UNDER § 10–606 OR § 10–607 OF THE CRIMINAL LAW ARTICLE; 9. IMPORTATION OF FENTANYL OR A FENTANYL ANALOGUE UNDER § 5–614(A)(1)(XII) OF THE CRIMINAL LAW ARTICLE; 10. STALKING UNDER § 3–802 OF THE CRIMINAL LAW ARTICLE; 11. A CRIMINAL ACT INVOLVING CIRCUMSTANCES PRESENTING A SUBSTANTIAL AND ONGOING THREAT TO PUBLIC SAFETY OR NATIONAL SECURITY; OR 12. A CRIME UNDER THE LAWS OF ANOTHER STATE SUBSTANTIALLY EQUIVALENT TO A CRIME LISTED IN ITEMS 1 THROUGH 10 OF THIS ITEM, INVOLVING A FUGITIVE FROM JUSTICE CHARGED WITH A CRIME IN THAT STATE AND SOUGHT UNDER TITLE 9 OF THIS ARTICLE;
(A)(1)(II)–(III) 3 ANALYZE AN IMAGE OR A RECORDING OF AN INDIVIDUAL: 1. ENGAGED IN ACTIVITY PROTECTED UNDER THE UNITED STATES CONSTITUTION, THE MARYLAND CONSTITUTION, OR THE MARYLAND DECLARATION OF RIGHTS, UNLESS THERE IS REASONABLE SUSPICION TO BELIEVE THAT THE INDIVIDUAL HAS COMMITTED, IS IN THE PROCESS OF COMMITTING, OR IS ABOUT TO COMMIT A CRIME; OR 2. WHO IS NOT INTENDED TO BE IDENTIFIED; (III) USE FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) TO ANALYZE A SKETCH OR MANUALLY PRODUCED IMAGE;
(A)(1)(IV)–(V) 4 DISCLOSE TO A WITNESS IN THE CRIMINAL INVESTIGATION, PRIOR TO THE WITNESS PARTICIPATING IN A LIVE IDENTIFICATION OR PHOTO ARRAY IDENTIFICATION, THAT A PARTICULAR SUSPECT OR IMAGE OF A SUSPECT WAS IDENTIFIED USING FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B); OR (V) USE FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) FOR THE PURPOSE OF LIVE OR REAL–TIME IDENTIFICATION OF AN IMAGE OR A RECORDING.
(A)(2) 5 EXCEPT AS PROVIDED IN SUBPARAGRAPH (II) OF THIS PARAGRAPH, AN IMAGE BEING EVALUATED USING FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) MAY BE COMPARED ONLY TO IMAGES CONTAINED IN: 1. THE DATABASE OF IMAGES OF DRIVER'S LICENSE AND IDENTIFICATION CARD PHOTOS MAINTAINED BY THE MOTOR VEHICLE ADMINISTRATION OR THE DEPARTMENT OF MOTOR VEHICLES OF ANOTHER STATE; OR 2. A DATABASE OF MUGSHOT PHOTOS MAINTAINED BY A LOCAL, STATE, OR FEDERAL LAW ENFORCEMENT AGENCY OR A LAW ENFORCEMENT AGENCY OF ANOTHER COUNTRY. (II) AN IMAGE BEING EVALUATED USING FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) MAY BE COMPARED TO AN IMAGE CONTAINED IN A DATABASE OTHER THAN A DATABASE DESCRIBED IN SUBPARAGRAPH (I) OF THIS PARAGRAPH IF: 1. THE LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) CONDUCTING THE INVESTIGATION HAS ENTERED INTO AN AGREEMENT WITH THE ENTITY THAT MAINTAINS THE DATABASE GOVERNING THE METHODS BY WHICH IMAGES IN THE DATABASE ARE COLLECTED; AND 2. THE AGREEMENT PROVIDES THAT THE AGREEMENT WILL BE TERMINATED IN THE EVENT THAT THE ENTITY MAINTAINING THE DATABASE COMMITS A MATERIAL BREACH OF THE PROVISIONS GOVERNING THE METHODS BY WHICH IMAGES IN THE DATABASE ARE COLLECTED.
(A)(3) 6 BEFORE BEING USED FOR ANY PURPOSE IN RELATION TO A CRIMINAL INVESTIGATION, A RESULT GENERATED BY FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) SHALL BE INDEPENDENTLY VERIFIED BY AN INDIVIDUAL WHO HAS COMPLETED TRAINING IN ACCORDANCE WITH § 2–505 OF THIS SUBTITLE.
(B) 7 A POLICE OFFICER OR OTHER EMPLOYEE OR AGENT OF A LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) MAY NOT USE FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) TO IDENTIFY AN INDIVIDUAL SOLELY BASED ON: (1) THE POLICE OFFICER'S, EMPLOYEE'S, OR AGENT'S PERSONAL INTEREST NOT RELATED TO LEGITIMATE DUTIES OR OBJECTIVES OF THE LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C); (2) THE INDIVIDUAL'S POLITICAL OR SOCIAL BELIEFS OR ACTIVITIES; (3) THE INDIVIDUAL'S PARTICIPATION IN LAWFUL ACTIVITIES; OR (4) THE INDIVIDUAL'S RACE, COLOR, RELIGIOUS BELIEFS, SEXUAL ORIENTATION, GENDER, DISABILITY, NATIONAL ORIGIN, OR STATUS AS BEING HOMELESS.
(C) EXCEPT AS PROVIDED IN PARAGRAPH (2) OF THIS SUBSECTION AND SUBJECT TO PARAGRAPH (3) OF THIS SUBSECTION, A RESULT GENERATED BY FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) IN VIOLATION OF THIS SECTION AND ALL OTHER EVIDENCE SUBSEQUENTLY DERIVED FROM THE RESULT MAY NOT BE INTRODUCED BY THE STATE FOR ANY PURPOSE IN A CRIMINAL COURT PROCEEDING OR IN A JUVENILE COURT PROCEEDING UNDER TITLE 3, SUBTITLE 8A OF THE COURTS ARTICLE. (2) EVIDENCE DERIVED FROM A RESULT GENERATED IN VIOLATION OF SUBSECTION (A)(1) OF THIS SECTION MAY BE INTRODUCED FOR A PURPOSE DESCRIBED IN § 2–502 OF THIS SUBTITLE IF THE COURT FINDS THAT THE EVIDENCE WOULD OTHERWISE BE SUBJECT TO A LEGALLY VALID EXCEPTION TO THE EXCLUSIONARY RULE. (3) THIS SUBSECTION MAY NOT BE CONSTRUED TO ALLOW THE USE OF A RESULT GENERATED USING FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) TO BE INTRODUCED AS EVIDENCE IN A CRIMINAL TRIAL OR IN AN ADJUDICATORY HEARING HELD UNDER § 3–8A–18 OF THE COURTS ARTICLE.
Section 2-503 is the operational core of the subtitle, imposing detailed restrictions on how law enforcement may use facial recognition technology. Use is limited to investigation of enumerated serious crimes — crimes of violence, human trafficking, child abuse, child pornography, hate crimes, weapon offenses, aggravated animal cruelty, fentanyl importation, stalking, substantial ongoing public safety or national security threats, and equivalent out-of-state fugitive offenses. The section prohibits analyzing images of persons engaged in constitutionally protected activity absent reasonable suspicion, analyzing individuals not intended to be identified, analyzing sketches or manually produced images, disclosing FRT-identified suspects to witnesses before lineup procedures, and conducting real-time identification.
Database comparison is restricted to driver's license/ID photo databases and law enforcement mugshot databases, with a contractual-safeguard pathway for alternative databases. A mandatory independent verification by a trained individual is required before any FRT result is used in a criminal investigation. Targeting individuals based on personal interest, political or social beliefs, lawful activities, or protected characteristics is categorically prohibited. Violations trigger evidentiary exclusion with a narrow good-faith exception.
8 THE STATE SHALL DISCLOSE, IN ACCORDANCE WITH THE MARYLAND RULES REGARDING DISCOVERY, WHETHER FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) HAS BEEN USED IN AN INVESTIGATION RELEVANT TO A CRIMINAL COURT PROCEEDING OR JUVENILE COURT PROCEEDING UNDER TITLE 3, SUBTITLE 8A OF THE COURTS ARTICLE, THE NAME OF EACH FACIAL RECOGNITION SYSTEM USED, A DESCRIPTION AND THE NAMES OF THE DATABASES SEARCHED, AND ALL RESULTS GENERATED FROM THE USE OF THE FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) THAT LED TO FURTHER INVESTIGATIVE ACTION FOR EACH FACIAL RECOGNITION SYSTEM AND FOR EACH DATABASE SEARCHED.
Section 2-504 requires the State to disclose, in accordance with Maryland Rules of Discovery, whether facial recognition technology was used in an investigation relevant to a criminal or juvenile court proceeding. The disclosure must include the name of each facial recognition system used, the names and descriptions of all databases searched, and all results that led to further investigative action — broken out by system and by database. This ensures defendants have full visibility into the role facial recognition played in their case.
(A) 9 A LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) THAT USES OR CONTRACTS FOR THE USE OF FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) SHALL DESIGNATE AN EMPLOYEE OF THE LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) TO BE RESPONSIBLE FOR OVERSEEING AND ADMINISTERING THE USE OF FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) IN COMPLIANCE WITH THIS SUBTITLE AS WELL AS APPLICABLE LOCAL LAWS, REGULATIONS, AND POLICIES.
(B)(1)–(2) 10 ON OR BEFORE OCTOBER 1 EACH YEAR, A LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) THAT USES OR CONTRACTS FOR THE USE OF FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) SHALL COMPLETE AN AUDIT TO DETERMINE COMPLIANCE WITH THIS SUBTITLE AS WELL AS APPLICABLE LOCAL LAWS, REGULATIONS, AND POLICIES. (2) THE RESULTS OF THE AUDIT CONDUCTED UNDER THIS SUBSECTION, INCLUDING ANY RECORDS, DATA, PAPERS, OR MATERIALS EVALUATED AS PART OF THE AUDIT, SHALL BE: (I) MAINTAINED BY THE LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) FOR AT LEAST 3 YEARS AFTER COMPLETION OF THE AUDIT, AFTER WHICH THE LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) MAY DESTROY ALL AUDIT MATERIALS; AND (II) UNLESS ALL AUDIT MATERIALS HAVE BEEN DESTROYED IN ACCORDANCE WITH ITEM (I) OF THIS PARAGRAPH, DISCLOSED IF REQUESTED BY: 1. THE ATTORNEY GENERAL; 2. THE PUBLIC DEFENDER; 3. A STATE'S ATTORNEY; 4. A UNITED STATES ATTORNEY; OR 5. A DESIGNEE OF AN INDIVIDUAL DESCRIBED IN ITEMS 1 THROUGH 4 OF THIS ITEM.
(C) 11 A POLICE OFFICER OR OTHER EMPLOYEE OR AGENT OF A LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) AUTHORIZED TO USE FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) IN THE COURSE OF CRIMINAL INVESTIGATIONS SHALL ANNUALLY COMPLETE TRAINING ADMINISTERED BY THE DEPARTMENT OF PUBLIC SAFETY AND CORRECTIONAL SERVICES UNDER § 2–506 OF THIS SUBTITLE.
Section 2-505 establishes three ongoing governance obligations for law enforcement agencies using facial recognition technology. First, each agency must designate a responsible employee to oversee and administer FRT use in compliance with the subtitle and applicable local law. Second, each agency must complete an annual compliance audit by October 1, retain audit materials for at least three years, and disclose them upon request to the Attorney General, Public Defender, State's Attorneys, U.S. Attorneys, or their designees. Third, authorized personnel must annually complete training administered by the Department of Public Safety and Correctional Services.
(A) 12 THE STATE POLICE, IN CONSULTATION WITH ANY OTHER RELEVANT STATE AGENCY, SHALL: (1) ADOPT AND PUBLISH A MODEL STATEWIDE POLICY REGARDING THE USE OF FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B).
(B) 13 A LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) MAY NOT USE OR CONTRACT FOR THE USE OF FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) FOR USE IN CRIMINAL INVESTIGATIONS UNLESS: (1) THE USE IS IN ACCORDANCE WITH THE MODEL STATEWIDE POLICY REGARDING THE USE OF FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) ADOPTED AND PUBLISHED UNDER SUBSECTION (A) OF THIS SECTION.
(C)(1)–(2) 14 ON OR BEFORE JUNE 30, 2025, THE DEPARTMENT OF PUBLIC SAFETY AND CORRECTIONAL SERVICES SHALL DEVELOP AND ADMINISTER A TRAINING PROGRAM REGARDING THE USE OF FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) IN THE COURSE OF CRIMINAL INVESTIGATIONS, INCLUDING TRAINING ON CULTURAL DIVERSITY AND IMPLICIT BIAS. (2) IN DEVELOPING THE TRAINING PROGRAM REQUIRED UNDER PARAGRAPH (1) OF THIS SUBSECTION, THE DEPARTMENT SHALL EVALUATE THE AVAILABILITY AND RELEVANCE OF ANY PROFICIENCY TESTING REGARDING THE USE OF FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) IN THE COURSE OF CRIMINAL INVESTIGATIONS.
Section 2-506 directs the State Police, in consultation with other relevant state agencies, to adopt and publish a model statewide policy regarding the use of facial recognition technology. Additionally, by June 30, 2025, the Department of Public Safety and Correctional Services must develop and administer a training program — including training on cultural diversity and implicit bias — and evaluate the availability and relevance of proficiency testing. Law enforcement agencies may not use or contract for facial recognition technology unless the use conforms to the model statewide policy.
THIS SUBTITLE MAY NOT BE CONSTRUED TO RESTRICT THE USE OF FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) FOR THE PURPOSE OF: (1) IDENTIFYING A MISSING OR DECEASED PERSON OR A PERSON WHO IS INCAPACITATED AND UNABLE TO OTHERWISE PROVIDE THE PERSON'S OWN IDENTITY; (2) REDACTING A RECORDING OR AN IMAGE FOR RELEASE OR DISCLOSURE TO PROTECT THE PRIVACY OF AN INDIVIDUAL DEPICTED IN A RECORDING OR AN IMAGE; (3) FORENSIC ANALYSIS OF ELECTRONIC MEDIA SEIZED BY LAW ENFORCEMENT IN RELATION TO A SPECIFIC INVESTIGATION IF THE PERSON IDENTIFIED IN THE ELECTRONIC MEDIA IS NOT THE SUBJECT OF CRIMINAL CHARGES RESULTING FROM THE FORENSIC ANALYSIS; (4) ENHANCING SECURITY SYSTEMS FOR PREVENTING UNAUTHORIZED ACCESS TO INFORMATION, GOODS, MATERIALS, AREAS, OR OTHER PROPERTIES UNDER THE CUSTODY OR CARE OF A LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C); OR (5) CONDUCTING OTHERWISE LEGITIMATE ACTIVITY UNRELATED TO A CRIMINAL INVESTIGATION.
Section 2-507 is a savings clause clarifying that the subtitle does not restrict facial recognition technology use for five enumerated non-investigative purposes: identifying missing, deceased, or incapacitated persons; redacting recordings for privacy; forensic analysis of seized electronic media where the identified person is not charged; enhancing physical security systems; and conducting otherwise legitimate activity unrelated to criminal investigation.
(A)–(B) 15 A LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) THAT USES FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) SHALL ADOPT AND MAINTAIN A USE AND DATA MANAGEMENT POLICY. (B) A LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) THAT DEVELOPS A POLICY UNDER SUBSECTION (A) OF THIS SECTION SHALL POST A COPY OF THE POLICY ON THE AGENCY'S PUBLIC WEBSITE.
(C) 16 A LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) THAT CONTRACTS FOR USE OF A NON–GOVERNMENT FACIAL RECOGNITION SYSTEM SHALL DISCLOSE ON ITS PUBLIC WEBSITE THE NAME OF THE SYSTEM AND THE NAMES AND A DESCRIPTION OF THE DATABASES SEARCHED.
Section 2-508 imposes three distinct transparency obligations. First, every law enforcement agency using facial recognition technology must adopt and maintain a use and data management policy. Second, the policy must be posted on the agency's public website. Third, any agency contracting for a non-government facial recognition system must publicly disclose the system's name and the names and descriptions of databases searched. These obligations ensure both internal governance and public accountability.
A PERSON MAY BRING A CIVIL ACTION AGAINST A LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) TO COMPEL COMPLIANCE WITH THIS SUBTITLE.
Section 2-509 creates a private right of action allowing any person to bring a civil action against a law enforcement agency to compel compliance with the subtitle. This is the bill's primary enforcement mechanism beyond evidentiary exclusion.
(A) 17 ON OR BEFORE FEBRUARY 1 EACH YEAR, A LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) USING OR CONTRACTING FOR THE USE OF FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) SHALL PREPARE AND PUBLISH AN ANNUAL REPORT THAT DISCLOSES INFORMATION FOR THE PRIOR CALENDAR YEAR, INCLUDING: (1) THE NAME OF EACH FACIAL RECOGNITION SYSTEM AND THE NAMES AND A DESCRIPTION OF THE DATABASES SEARCHED; (2) FOR EACH FACIAL RECOGNITION SYSTEM, THE TOTAL NUMBER OF FACIAL RECOGNITION SEARCHES PERFORMED BY THE LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) AND THE TYPE OF CRIME OR INCIDENT ASSOCIATED WITH EACH USE; (3) THE TOTAL NUMBER OF POSSIBLE MATCHES RETURNED THAT LED TO FURTHER INVESTIGATIVE ACTION FOR EACH FACIAL RECOGNITION SYSTEM AND FOR EACH DATABASE SEARCHED; AND (4) ANY DATA BREACHES OR UNAUTHORIZED USES OF FACIAL RECOGNITION TECHNOLOGYFacial recognition technology"Facial recognition technology" means a computer program, service, or other technology that analyzes facial features and is used by or at the direction of a law enforcement agency for the identification, verification, or persistent tracking of individuals in still or video images for use in criminal investigations. "Facial recognition technology" does not include technology: (I) used only for the analysis of facial features to grant or deny access to an electronic device; or (II) that uses an automated or semiautomated process only for the purpose of redacting a recording or an image for release or disclosure outside a law enforcement agency to protect the privacy of a subject depicted in the recording or image if the process does not generate or result in the retention of any biometric data or surveillance information.Md. Code, Crim. Proc. § 2-501(B) UNDER THE LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C)'S CONTROL.
(B) 18 ON OR BEFORE MAY 1 EACH YEAR, A LAW ENFORCEMENT AGENCYLaw enforcement agency"Law enforcement agency" has the meaning stated in § 2-101 of the Public Safety Article.Md. Code, Crim. Proc. § 2-501(C) REQUIRED TO PREPARE A REPORT UNDER SUBSECTION (A) OF THIS SECTION SHALL SUBMIT THE REPORT TO THE GOVERNOR'S OFFICE OF CRIME PREVENTION, YOUTH, AND VICTIM SERVICES.
(C) ON OR BEFORE OCTOBER 1 EACH YEAR, THE GOVERNOR'S OFFICE OF CRIME PREVENTION, YOUTH, AND VICTIM SERVICES SHALL SUBMIT TO THE GOVERNOR AND, IN ACCORDANCE WITH § 2–1257 OF THE STATE GOVERNMENT ARTICLE, THE GENERAL ASSEMBLY A REPORT CONSISTING OF THE INFORMATION REPORTED BY LAW ENFORCEMENT AGENCIES UNDER SUBSECTION (B) OF THIS SECTION, DISAGGREGATED BY AGENCY.
Section 2-510 establishes a three-tier annual reporting framework. By February 1 each year, every law enforcement agency using facial recognition technology must prepare and publish an annual report disclosing the name of each system and databases searched, the total number of searches per system with associated crime types, the total matches that led to further investigative action per system and database, and any data breaches or unauthorized uses. By May 1, agencies must submit the report to the Governor's Office of Crime Prevention, Youth, and Victim Services. By October 1, that office must submit a consolidated, agency-disaggregated report to the Governor and General Assembly.