Md. Code, Criminal Procedure § 2–508

(a) A law enforcement agency that uses facial recognition technology shall adopt and maintain a use and data management policy.

(b) A law enforcement agency that develops a policy under subsection (a) of this section shall post a copy of the policy on the agency’s public website.

(c) A law enforcement agency that contracts for use of a nongovernment facial recognition system shall disclose on its public website the name of the system and the names and a description of the databases searched.