Camera-related state law

The governing audio statute is the Maryland Wiretap Act, Md. Code Ann., Cts. & Jud. Proc. 10-402. The Act makes interception of an oral, wire, or electronic communication a felony unless all parties to the communication consent. Maryland is therefore a two-party (all-party) consent state for audio recording, and the courts have applied the all-party consent requirement strictly.

Video-only surveillance of common areas with posted notice is generally lawful. Md. Crim. Law 3-901 et seq. (visual surveillance with prurient intent) reaches hidden cameras in places where privacy is reasonably expected. Posted notice at the entrance is the industry standard.

Practical translation. Commercial MD camera installs default to video-only on the cameras and route audio capture through a separate documented intercom or call-recording workflow with all-party consent disclosed. Hidden cameras in spaces where privacy is expected are off-limits.

Security contractor licensing

The Maryland State Police Licensing Division regulates security systems technicians and certain related categories under Md. Code, Bus. Reg. 19-101 et seq. and COMAR 29.03.01. Companies installing electronic security or alarm systems for compensation should verify their state license posture before signing in Maryland.

Local jurisdictions add layers. Baltimore City, Baltimore County, Montgomery County, Prince George's County, and other municipalities require alarm permits and impose registration on alarm businesses. The DC metro contractor footprint pulls in additional federal procurement expectations.

Biometric data and MODPA

The Maryland Online Data Privacy Act, Md. Com. Law 14-4601 et seq., took effect October 1, 2025. MODPA applies to controllers conducting business in Maryland or producing products targeted to Maryland residents above defined thresholds (35,000 consumers, or 10,000 consumers and 20 percent of gross revenue from sale of personal data). The Act classifies biometric data as sensitive personal data and requires consent before processing.

For commercial security buyers, the practical reach is fingerprint and facial-recognition access control and any AI camera that builds a faceprint template. MODPA compliance requires consent, privacy notice, consumer-rights handling, and a data protection assessment for sensitive processing. MODPA also includes data minimization rules that are more restrictive than peer state laws. Enforcement is by the Maryland Attorney General; there is no private right of action.

Privacy in the workplace

Maryland's all-party consent rule under 10-402 has practical implications for any employer audio recording. Pure video surveillance of common work areas with posted notice is generally lawful. Cameras in employee-only spaces with a reasonable expectation of privacy (restrooms, locker rooms, lactation rooms) are off-limits.

Most MD employers issue a single workplace surveillance notice in the employee handbook and obtain written acknowledgment at hire. The acknowledgment is the practical mechanism that documents the all-party consent posture for any audio capture.

Video retention requirements

  • Cannabis. Maryland Cannabis Administration rules under COMAR 14.17 set retention for licensed facilities. Pull the current MCA text before designing the install.
  • Healthcare. HIPAA Security Rule (45 CFR Part 164) governs PHI-touching footage.
  • Retail and hospitality. PCI-DSS Requirement 9 specifies 90-day retention for the cardholder data environment.
  • Federal contractors. NDAA Section 889 controls vendor selection. Maryland's federal contractor density (NSA, APG, NIH, FDA) layers in CMMC, CUI, and SCIF expectations.
  • Schools. FERPA reach for K-12 districts and higher education.

Default retention for MD commercial systems with no specific industry rule is 30 days. Federal-touching customers commonly set longer retention with explicit written retention policies.

What Tec-Tel does to comply with Maryland regulations

  • Video-only on cameras unless audio is documented with all-party consent under Md. Cts. & Jud. Proc. 10-402.
  • Posted surveillance notice at every public entrance.
  • No cameras in restrooms, locker rooms, dressing rooms, or any space where privacy is reasonably expected.
  • MODPA consent and notice language coordinated with the customer's privacy team for any biometric capture.
  • Retention configured to the regime that governs the industry (HIPAA, PCI, MCA, NDAA), with the facility's written retention policy attached.
  • NDAA Section 889-compliant vendor selection on federal-touching installs.
  • MSP-licensed contractor work where the install scope triggers Bus. Reg. 19-101.

This is a buyer-facing reference, not legal advice.

Security service in Maryland

Tec-Tel deploys AI-era security across Maryland with one accountable project manager owning design, install, and service to one standard. The cities below have local service detail, deal sizing, and a free consultation. Don't see yours? We cover the whole state.

Or browse the full city directory and nationwide coverage map.