Maryland Kids Code (HB 603)
What it does
Online services reasonably likely to be accessed by anyone under 18 must complete data protection impact assessments (the first were due April 1, 2026), set high privacy by default, and design their products in the best interests of children. It took effect October 1, 2024. NetChoice sued in February 2025 on First Amendment and preemption grounds; the court denied Maryland's motion to dismiss on November 24, 2025, and NetChoice filed an amended complaint in April 2026. There is no injunction, so the law applies now.
Why it matters
California's version of this law got enjoined. Maryland's is the live test of whether a redrafted design code survives the First Amendment, and every state considering a kids code is watching this docket.
Our take
Reasonably likely to be accessed by minors describes most of the internet, and best interests of children means whatever a regulator decides it means. To know which users get the child treatment, every covered site has to estimate every visitor's age. The privacy law makes the sites watch you more closely.
Votes
- House — Third reading (135 to 0) · March 14, 2024
- Senate — Third reading (47 to 0) · April 3, 2024
Timeline
- October 1, 2024Took effect
- November 24, 2025Court denied Maryland's motion to dismiss the NetChoice challenge
- April 1, 2026First data protection impact assessments due
Legal challenges
Motion to dismiss denied November 2025; amended complaint filed April 2026; no injunction
Related bills
Our coverage: all age-verification stories