Md. Code, State Fin. & Proc. § 3.5-307

(a) (1) A unit of State government may not purchase, lease, contract for, or rent an information technology service or product unless consistent with the master plan, as determined by the Secretary. (2) A unit of State government other than a public institution of higher education may not make expenditures for major information technology development projects or cybersecurity projects except as provided in § 3.5–308 of this subtitle. (b) The Secretary may review any information technology project or cybersecurity project for consistency with the master plan. (c) (1) A unit of State government shall advise the Secretary of any information technology proposal involving: (i) resource sharing; (ii) the exchange of goods or services; (iii) a gift, contribution, or grant of real or personal property; or (iv) the sale, lease, exchange, or other disposition of communications facilities or communications frequencies. (2) The Secretary shall determine if the value of the resources, services, property, or other consideration to be obtained by the State under the terms of any proposal submitted in accordance with paragraph (1) of this subsection equals or exceeds $100,000. (3) If the value of any proposal submitted in accordance with this subsection equals or exceeds $100,000 and the Secretary and unit agree to proceed with the proposal, information on the proposal shall be: (i) advertised for a period of at least 30 days in the eMaryland Marketplace; and (ii) submitted, simultaneously with the advertisement, to the Legislative Policy Committee for a 60–day review and comment period, during which time the Committee may recommend that the proposal be treated as a procurement contract under Division II of this article. (4) Following the period for review and comment by the Legislative Policy Committee under paragraph (3) of this subsection, the proposal is subject to approval by the Board of Public Works. (5) This subsection may not be construed as authorizing an exception from the requirements of Division II of this article for any contract that otherwise would be subject to the State procurement process. (d) (1) The Department, in consultation with the Department of General Services, shall assess the procurement process for information technology projects involving modernization and make recommendations to increase the State’s ability to proceed with a modernization project in a rapid and responsive manner. (2) (i) On or before July 1, 2025, the Department shall inventory and assess the State’s legacy systems and prioritize modernization. (ii) On or before January 1, 2026, and every other January 1 thereafter, the Department, in consultation with each unit of State government, shall submit a report to the Governor, the Secretary, and, in accordance with § 2–1257 of the State Government Article, the General Assembly that provides: 1. an estimate of the funding required to modernize each legacy system in the unit; and 2. a 5–year projection of funding required to modernize each legacy system.