Generates audio with AI, in Maryland

Md. Code Ann., Com. Law sections 14-3502, 14-3503 (Maryland Personal Information Protection Act, Title 14, Subtitle 35, added by 2007 Md. Laws ch. 531 (S.B. 194)) · Read the law's page

• This binds any business that owns, maintains, or licenses the personal information of a Maryland resident; a business already complying with the security, notification, or destruction rules set by its own primary or functional federal or State regulator, or already subject to and in compliance with all four of section 501(b) of the Gramm-Leach-Bliley Act, section 216 of the Fair and Accurate Credit Transactions Act, the federal Interagency Guidelines Establishing Information Security Standards, and the federal Interagency Guidance on Response Programs, or with HIPAA, is deemed to comply with this duty.
• Absent that safe harbor, implement and maintain reasonable security procedures and practices, appropriate to the nature of the personal information held and the size of the business, to protect it from unauthorized access, use, modification, or disclosure.
• When destroying a customer's, an employee's, or a former employee's records containing personal information, take reasonable steps to protect against unauthorized access to or use of that information, weighing the sensitivity of the records, the size of the business, the cost of different destruction methods, and available technology.
• Where a nonaffiliated third-party service provider will receive personal information under a written contract entered into on or after January 1, 2009, require by that contract that the provider also implement and maintain reasonable security procedures and practices appropriate to the information disclosed.
• A violation is an unfair or deceptive trade practice enforced by the Office of the Attorney General's Consumer Protection Division, for injunctive relief and a civil penalty of up to $10,000 per violation ($25,000 for a repeat violation); any person harmed may also bring a private action for injury or loss, and Title 13's own misdemeanor provision may extend to a violation of this duty.

Md. Code Ann., Elec. Law §16-905 · Read the law's page

• Do not knowingly, or with reckless disregard, create, use, or disseminate a deepfake, meaning AI-generated or other digitally manipulated media an ordinary person would conclude is an authentic depiction, with intent to impede or influence a voter's decision, misrepresent voter-registration or election facts, or induce or deter a ballot-question petition signature, where the act results or is intended to result in harm to a voter or petition.
• Satire or parody is exempt.
• A broadcaster, website, or periodical is exempt for content that carries a clear and conspicuous disclosure that it may contain deceptive audio or visual media.

Md. Code Ann., Crim. Law §8-301(f)(2) · Read the law's page

• Do not knowingly, willfully, and with fraudulent intent use artificial intelligence or a deepfake representation to impersonate, falsely depict, or claim to represent another person with intent to defraud, mislead, or cause physical injury, serious emotional distress, or economic damages to that person or anyone else.
• A victim of this conduct may bring a civil action and seek an injunction and other appropriate relief.

Md. Code Ann., Com. Law §§13-101 et seq.

• This law is recorded as enacted, but the record carries no commencement date, so whether it is yet in force has to be established before relying on what follows.
• Do not make false representations about the identity or nature of a service, or otherwise engage in unfair or deceptive trade practices affecting consumers.
• Disclose to consumers when they are interacting with an automated bot or AI-generated content rather than a human.
• Do not make materially false claims about AI-generated information.