Maryland passed two companion bills amending state Personal Information Protection Act. Bills modify data breach notification requirements, scope of businesses subject to data security requirements. Key changes are summarized below, will go into effect October 1.