The rapid adoption of Artificial Intelligence (AI) across industries has ushered in an era of unprecedented innovation, but also complex regulatory challenges. For businesses operating in Maryland, understanding the specific AI compliance requirements is no longer optional—it's critical for risk mitigation and sustained growth. This article provides a deep dive into Maryland's AI regulatory landscape, alongside key federal and international laws that could impact Maryland-based companies. Navigating this evolving environment requires a proactive strategy, often supported by a robust AI compliance platform.

Maryland's Landmark AI Employment Law: HB 1106

Maryland is taking a significant step towards regulating the use of AI in employment decisions. The Maryland AI Employment Law (HB 1106), which became effective on October 1, 2025, targets employers who utilize AI-powered tools in hiring, promotion, and termination processes. This law aims to protect job applicants and employees from discriminatory outcomes and ensure transparency in AI-assisted decision-making.

Key Provisions of HB 1106

The Maryland AI Employment Law introduces several critical obligations for employers:

Bias Audit Requirement: Employers must conduct an annual bias audit of any AI-powered system used in employment decisions. This audit must identify and assess any potential for discriminatory impact based on protected characteristics. The results of this audit must be documented and maintained.
Notice and Consent: Before using an AI-powered tool for evaluating job applicants or employees, employers must provide clear and conspicuous notice. This notice must inform individuals that AI will be used, explain the characteristics the AI will evaluate, and outline how the AI will be used to assess their qualifications. Crucially, employers must also obtain informed consent from the individual to use the AI tool.
Human Review and Override: The law mandates that employers ensure a human being can review and, if necessary, override any adverse decision made solely based on an AI-powered tool. This provision emphasizes the importance of human oversight in critical employment outcomes.
Data Security and Privacy: While not explicitly detailed in the provided facts, AI employment laws typically imply requirements for safeguarding data collected and processed by AI systems, aligning with broader data privacy regulations.

Who Must Comply with HB 1106?

The Maryland AI Employment Law (HB 1106) applies to any employer operating in Maryland that uses AI-powered tools for employment-related decisions. This broad scope means that mid-to-large companies, regardless of their primary industry, must assess their HR technology stack for AI components. Non-compliance can lead to significant repercussions, with penalties reaching up to $10,000 per violation, enforced by the Maryland Commissioner of Labor and Industry.

For organizations leveraging various AI solutions in their HR functions, an AI compliance platform becomes indispensable for managing these requirements. Platforms like AICompliant can help businesses track AI usage, automate bias audit scheduling, manage consent workflows, and maintain auditable records, ensuring adherence to HB 1106.

The Broader AI Compliance Landscape Beyond Maryland

While Maryland's HB 1106 is a key local consideration, mid-to-large companies often operate in multi-jurisdictional environments. This means Maryland-based businesses may also need to contend with a patchwork of other state, federal, and international AI regulations. Proactive AI compliance automation is crucial for navigating this complex web.

State-Level Regulations Impacting Maryland Businesses

Several other U.S. states have enacted or are developing their own AI regulations, which could apply to Maryland businesses based on their customer base, operational footprint, or data processing activities.

Colorado AI Act (SB 24-205): Effective June 30, 2026, the Colorado AI Act (SB 24-205) is one of the most comprehensive state-level AI regulations. It focuses on "high-risk artificial intelligence systems" that make consequential decisions impacting consumers' access to essential opportunities (e.g., employment, housing, credit). Developers and deployers of such systems must implement reasonable care to avoid algorithmic discrimination, conduct impact assessments, and provide transparency to consumers. Maryland companies developing or deploying high-risk AI systems that target or impact Colorado residents must comply. Penalties can reach up to $20,000 per violation, enforced by the Colorado Attorney General. Understanding these Colorado AI Act requirements is essential for any business with a national presence.
NYC Automated Employment Decision Tools (AEDT) Law (Local Law 144): Even if your primary operations are in Maryland, if you employ individuals in New York City or use AEDTs to screen candidates for NYC-based positions, NYC Local Law 144 of 2021 is highly relevant. Effective July 5, 2023, this law requires employers to conduct bias audits, provide specific notices to candidates, and publish audit results for AEDTs used in hiring and promotion. Non-compliance can result in penalties of up to $1,500 per violation per day, enforced by the NYC Department of Consumer and Worker Protection (DCWP).
California AI Regulations (AB 2013, SB 53, SB 942): California is also a significant player in AI regulation.
- California AB 2013 (Training Data), effective January 1, 2025, focuses on the provenance and characteristics of AI training data, aiming to ensure fairness and prevent bias. Penalties can be up to $7,500 per violation.
- California SB 53 (Frontier AI / Incident Reporting), effective September 29, 2025, requires developers of "frontier AI models" (those with specified computational power thresholds) to conduct safety testing and report critical incidents. Non-compliance carries severe penalties, up to $1,000,000 per violation.
- California AI Transparency Act (SB 942), effective January 1, 2026, requires disclosure when individuals are interacting with an AI system rather than a human. Violations can cost up to $5,000 per violation per day.
Connecticut AI and Data Privacy (SB 1103): Effective October 1, 2025, this law introduces provisions around AI in data privacy, requiring certain assessments and disclosures related to automated decision-making. Penalties are up to $5,000 per violation.
Illinois AI Video Interview Act (AIVIA) (HB 2557): Effective January 1, 2020, this law applies to employers in Illinois using AI to analyze video interviews. It requires notice, consent, and information about how the AI works. Penalties are up to $1,000 per violation.

International and Federal Overlays

Beyond state lines, Maryland businesses with international customers, data processing activities, or products offered abroad must also consider major international and emerging federal AI regulations.

EU AI Act (Regulation (EU) 2024/1689): For any Maryland company developing, deploying, or providing AI systems into the European Union, the EU AI Act is a landmark piece of legislation. It adopts a risk-based approach, categorizing AI systems into unacceptable, high, limited, and minimal risk. High-risk AI systems, particularly those used in employment, critical infrastructure, law enforcement, and other sensitive areas, face stringent requirements including conformity assessments, risk management systems, quality and data governance, human oversight, and robustness. While effective August 1, 2024, specific provisions like those for high-risk AI systems will become enforceable on August 2, 2026. Non-compliance can lead to astronomical fines, up to $35,000,000 per violation or 7% of global annual turnover, whichever is higher. An EU AI Act compliance checklist is vital for any company operating in or serving the EU market.
GDPR (AI Provisions): The existing GDPR (Regulation (EU) 2016/679), effective May 25, 2018, already contains provisions relevant to AI, particularly concerning automated individual decision-making (Article 22), data minimization, and privacy by design. AI systems processing personal data of EU residents must adhere to GDPR, with penalties up to $20,000,000 per violation or 4% of global annual turnover. The EU AI Act complements, rather than replaces, GDPR.
NIST AI Risk Management Framework (AI RMF 1.0): While voluntary, the NIST AI RMF 1.0 provides a robust framework for managing AI risks. Many regulators (including those for the EU AI Act) look to NIST for best practices. Implementing NIST guidance can strengthen your overall AI compliance platform and demonstrate due diligence.
FTC Section 5 (AI Enforcement): The Federal Trade Commission (FTC) is actively using its authority under Section 5 of the FTC Act (prohibiting unfair or deceptive practices) to address issues related to AI, such as bias, deception, and lack of transparency. Penalties can be up to $50,000 per violation per day.

The Urgency of Proactive and Automated AI Compliance

The patchwork of evolving AI regulations—from Maryland's HB 1106 to the Colorado AI Act requirements and the global reach of the EU AI Act compliance framework—presents a formidable challenge for compliance officers, general counsel, and CTOs. The risks are substantial, ranging from hefty financial penalties and legal action to significant reputational damage and erosion of consumer trust.

Manual compliance processes are no longer sustainable given the volume and complexity of these requirements. Businesses need solutions that offer:

Real-time regulatory tracking: Staying abreast of new bills, effective dates, and enforcement updates across multiple jurisdictions.
Automated risk assessments: Identifying and evaluating AI systems for potential compliance gaps against specific regulations.
Policy and control management: Developing, implementing, and monitoring internal policies and technical controls to meet regulatory demands.
Audit readiness: Maintaining comprehensive, auditable records of AI system development, deployment, risk assessments, and compliance actions.

This is where a dedicated AI compliance software or AI compliance tool becomes invaluable. Solutions designed for automated AI compliance can streamline these processes, reduce human error, and provide a clear, centralized view of an organization's AI risk and compliance posture.

Leveraging AICompliant for Robust Maryland AI Compliance and Beyond

Navigating Maryland’s AI Employment Law and the broader regulatory environment requires precision, foresight, and powerful tools. AICompliant offers a cutting-edge AI compliance platform specifically engineered to meet these challenges.

Our platform provides comprehensive features to help your organization:

Track Maryland HB 1106 and other state requirements: Automatically receive updates on relevant legislation like the Maryland AI Employment Law (HB 1106), Colorado AI Act (SB 24-205), and NYC Local Law 144, ensuring you never miss a critical deadline or obligation.
Conduct automated risk and bias assessments: Utilize AICompliant's integrated compliance-checker to identify high-risk AI systems and automate bias audits, directly addressing requirements in HB 1106, the EU AI Act, and NYC Local Law 144.
Manage consent and notice workflows: Implement compliant notice and consent mechanisms for AI usage in employment, as mandated by Maryland HB 1106.
Maintain an auditable trail: Centralize all AI governance documentation, risk assessments, policy implementations, and compliance reports within your AICompliant dashboard, ready for internal audits or regulatory scrutiny.
Benchmark against global standards: Leverage our insights into frameworks like NIST AI RMF and ISO/IEC 42001 to build a resilient and future-proof AI governance strategy that transcends specific regional mandates.

By integrating AICompliant into your compliance framework, your organization can move beyond reactive responses to proactive, strategic AI governance. This allows compliance officers, general counsel, and CTOs to confidently deploy AI while ensuring ethical use and adherence to a rapidly expanding body of law.

Conclusion

The landscape of AI regulation is complex and rapidly evolving, with Maryland's HB 1106 marking a significant step in localized governance. For mid-to-large companies, understanding and implementing robust AI compliance software is not merely a legal obligation but a strategic imperative. From Maryland's employment-focused rules to the extensive reach of the EU AI Act, the need for an integrated, intelligent, and automated approach to AI governance has never been greater. Proactive compliance protects against penalties, builds trust, and positions your organization as a responsible innovator in the age of AI.

Ready to Automate Your AI Compliance?

Don't let the complexity of AI regulations compromise your business. Explore how AICompliant can streamline your compliance efforts, mitigate risks, and ensure your AI initiatives are both innovative and compliant. Learn More & View Pricing

Frequently Asked Questions

What is the primary AI law in Maryland that businesses need to know?

The primary AI law in Maryland is the Maryland AI Employment Law (HB 1106), which became effective on October 1, 2025. It regulates the use of AI-powered tools in employment decisions, requiring bias audits, notice and consent for applicants/employees, and human review capabilities.

What are the penalties for non-compliance with Maryland's AI Employment Law?

Employers found in violation of the Maryland AI Employment Law (HB 1106) can face penalties of up to $10,000 per violation. Enforcement is handled by the Maryland Commissioner of Labor and Industry.

Do Maryland businesses need to worry about the EU AI Act or Colorado AI Act?

Yes, potentially. Maryland businesses with operations or customers in the EU that develop or deploy AI systems there must comply with the EU AI Act (Regulation (EU) 2024/1689). Similarly, if a Maryland business develops or deploys "high-risk artificial intelligence systems" that target or impact residents of Colorado, it must comply with the Colorado AI Act (SB 24-205). These laws carry significant penalties of up to $35,000,000 and $20,000 per violation, respectively.

How can an AI compliance platform help with Maryland AI regulations?

An AI compliance platform like AICompliant can automate crucial tasks required by Maryland's HB 1106 and other laws. This includes scheduling and documenting bias audits, managing notice and consent workflows, tracking AI system inventories, and maintaining an auditable record of compliance activities. This significantly reduces manual effort and ensures adherence to regulatory deadlines.

What are the key requirements of Maryland's AI Employment Law (HB 1106)?

Key requirements under Maryland's AI Employment Law (HB 1106) include conducting annual bias audits of AI-powered employment tools, providing clear notice and obtaining informed consent from individuals before using AI in employment decisions, and ensuring that there is a human review and override capability for any adverse decisions made by AI.

AI Compliance in MD: What Businesses Need to Know