Maryland’s technology department published a new set of cybersecurity and privacy policies, designed to simplify rules as the state phases out its "trust but verify" framework.