MD AADC
Maryland Age-Appropriate Design Code Act (Commercial Law § 14-4601 et seq.)
Maryland design code modeled on UK approach: applies to covered online products reasonably likely to be accessed by minors. Pushes privacy-by-default, risk assessment, limits on "materially detrimental" data practices.
Jurisdiction
Maryland
Enacted
Pending
Effective
Oct 1, 2024
Enforcement
Maryland Attorney General
Why It Matters
First US AADC to survive initial legal challenge. NetChoice lawsuit motion to dismiss denied Nov 24, 2025; law remains in effect.
Recent Developments
NetChoice filed First Amendment challenge (Feb 2025). Motion to dismiss denied Nov 2025. Outcome will shape viability of other state AADCs.
At a Glance
Applies to
Harms addressed
Who Must Comply
- Operators of covered online products reasonably likely to be accessed by minors (under 18) in Maryland
Obligations fall on:
Safety Provisions
- Must consider minors' best interests in design and operation
- DPIA-style obligations for covered online products
- Restrictions on processing data in ways materially detrimental to minors' physical/mental health or wellbeing
- High privacy defaults; limits on collecting/using/sharing beyond necessity
- Limits on dark patterns / manipulative design
Compliance & Enforcement
Key Dates
Oct 1, 2024
All provisions took effect
Penalties
$8K/violation
View on map
Maryland
Focus Areas
Cite This
APA
Maryland. (2024). Maryland Age-Appropriate Design Code Act (Commercial Law § 14-4601 et seq.).
Related Regulations
IL HB 5511
Requires covered operators of online platforms to apply protective default settings to users they know to be minors, including limits on algorithmic feeds, a 10 p.m. to 7 a.m. notification curfew and no autoplay by default on addictive social media platforms, and establishes a device-level age-bracket signal that Internet-enabled device manufacturers must provide and operators must request. Announced by the Governor as the Children's Social Media Safety Act, the title of the bill as introduced. Enforced by the Attorney General.
NJ Kids Code
Codifies a New Jersey Age-Appropriate Design Code requiring covered online service providers to design services likely to be accessed by minors around minors' safety and wellbeing, including high-privacy defaults, limits on engagement-maximising design features, and data protection impact assessments. Enforced by the Attorney General with a private right of action for minors and their parents.
NY SAFE Act
Restricts algorithmically personalized ("addictive") feeds and overnight notifications for under-18 users without parental consent.
MD HB 895
First US state law to outright ban surveillance-based personalized pricing in food retail and third-party delivery, prohibiting use of protected class data and dynamic pricing tied to consumer personal data with limited exceptions for cost-based pricing, loyalty programs, and explicit consent.
MD HB 952
Regulates companion chatbot operators with mandatory disclosures, harm detection, and crisis referral protocols for self-harm and suicidal ideation, backed by product liability and a private right of action.
IA SF 2417
Establishes requirements and guidelines for conversational AI services including AI disclosure to minors, prohibition on sexually explicit content for minors, prevention of deceptive human-like interactions, and parental controls for children under 13.
Last updated February 17, 2026. Verify against primary sources before relying on this information.