Maryland Healthcare AI Utilization Review (HB 820)
Effective date
Penalty
Misdemeanor criminal charges, monetary penalties, administrative actions including license suspension or revocation, cease-and-desist, restitution.
Obligations mapped
Tracked
Overview
May apply to AI tools used in healthcare coverage decisions, calling for determinations based on individual patient data rather than group datasets. Where applicable, final utilization review decisions may need to be made by a physician in the same specialty. Where applicable, carriers may need to report whether AI was used in adverse decisions. Does not ban AI in healthcare: where applicable it may require AI to use individual patient data and may mandate human physician final decisions.
This is a sector-specific state law with AI-related duties.
See if this regulation applies to your company with the free exposure scan.
Who this applies to
This regulation applies to the following roles:
- Developers of covered AI systems
- Deployers and users of covered AI systems
- Organizations operating in Maryland
This regulation applies to both companies that build AI products and companies that use AI tools from other vendors.
HB 820
AI categories covered
- Healthcare AI
- Insurance
Specific AI use cases:
- Insurance prior authorization
- clinical decision support
- insurance claims ai
- Insurance underwriting
- Diagnostic and clinical AI
What this requires you to do
Detailed obligation packs are not yet mapped for this entry in XIRA. Obligation areas from the catalog are listed below.
What this requires you to do
Human oversight required
Ensure human oversight. A human must be able to review and override AI-driven decisions.
Transparency notice required
Provide transparency notices. Inform affected individuals that AI is being used and how it influences decisions.
Record-keeping required
Maintain records. Keep documentation of your AI systems, decisions made, and compliance activities.
Regulation summaries are simplified for readability and may not capture every nuance of the underlying statute. Verify important details against primary sources linked on this page.
Enforcement and penalties
Misdemeanor criminal charges, monetary penalties, administrative actions including license suspension or revocation, cease-and-desist, restitution.
Penalty amounts are based on statutory text and may be subject to adjustment, judicial interpretation, or enforcement discretion.
Legislative history
effective
Takes effect
signed
Approved by Governor (Chapter 747)
signed
Senate Third Reading Passed 47-0
signed
House Third Reading Passed 135-0
introduced
Introduced in House
Related regulations
- UpcomingAI-Specific
Washington SB 5395 (AI in Health Insurance Prior Authorization)
Enacted as Chapter 157, Laws of 2026; Governor signed March 23, 2026; effective June 11, 2026. AI tools may be used to approve prior authorization requests but may not deny care without human review by a licensed physician or health professional. Where applicable, managed care organizations may need to report the percentage of total denials aided by AI. Periodic performance reviews of AI tools may be required for accuracy and reliability.
Effective
- In EffectAI-Specific
California Healthcare AI Deceptive Terms Act (AB 489)
AB 3030 (2024) requires healthcare providers to disclose generative AI use to patients and in records. AB 489 (2025) extends similar duties to technology developers and deployers whose healthcare AI communicates with patients or presents as credentialed care. It bars false claims of professional licenses or credentials and requires clear disclosures in healthcare settings.
Effective
- In EffectAI-Specific
Texas SB 1188 - Healthcare AI Practitioner Disclosure
Requires healthcare providers using AI-enabled clinical support features in electronic health record workflows to disclose AI involvement in clinical decision support contexts. Applies to AI-assisted diagnosis, treatment recommendations, and clinical support pathways in covered settings.
Effective
- In EffectAI-Specific
Maryland HB 1202 (Facial Recognition in Hiring)
Prohibits creating facial templates of job applicants during interviews without signed consent. Where applicable, the waiver may need to include the applicant's name, interview date, consent to facial recognition use, and whether the applicant read the waiver. Scope is narrower than Illinois BIPA: it only covers facial recognition during interviews, not biometric data collection generally.
Effective
- In EffectPrivacy ADM
Maryland Online Data Privacy Act (MODPA), ADM and profiling provisions
Statute effective October 1, 2025, but enforcement does not begin until April 1, 2026. The law does not apply to processing activities before April 1, 2026. Considered one of the strongest state privacy laws due to strict data minimization and a complete ban on selling sensitive data (not only opt-in consent). The threshold of 35,000 consumers is lower than most states. Controllers must handle profiling and automated decision-making with strong consumer protections, including documented risk assessments and opt-out rights. Impact assessments required per algorithm used in high-risk processing. Nonprofits are largely included. Universal opt-out signals required from day one. 60-day cure period with no sunset date in the current statute.
Effective
- In EffectAI-Specific
Maryland AI Governance Act of 2024 (SB 818)
Requires Maryland state agencies to inventory AI systems, conduct impact assessments, and follow DoIT policies for AI procurement and use. Applies to state government agencies only, not the private sector.
Effective
- In EffectAI-Specific
Maryland Nonconsensual Pornography Deepfake Expansion (SB 360)
Expands Maryland's revenge porn statute to cover AI-generated and computer-generated sexual imagery. Strengthens civil remedies for victims of synthetic intimate images.
Effective
Maryland AI regulation guide lists every tracked rule for this jurisdiction with timelines and obligation tallies.
Regulation summaries are simplified for readability and may not capture every nuance of the underlying statute. Verify important details against primary sources linked on this page.