Source: http://www.btlg.us/News_and_Press/articles/Personal%20Information%20Protection%20Act
Timestamp: 2019-04-22 02:01:51+00:00

Document:
(iv) An Individual Taxpayer Identification Number. Md Code, Commercial Law § 14-3501(d)(1).
Publicly available information, information consented for release, or information regulated by HIPAA are excepted. Md Code, Commercial Law § 14-3501(d)(2).
When destroying customer records containing personal information, businesses must take reasonable steps to prevent unauthorized access or use of the personal information. Md Code, Commercial Law § 14-3502.
Businesses that maintain personal information must “implement and maintain reasonable security procedures and practices”. Md Code, Commercial Law § 14-3503.
Under certain circumstances, businesses have an obligation to conduct an investigation and notify individuals if there is a breach of security and possible mis-use of the personal information. Md Code, Commercial Law § 14-3504.
Violations of the statute are unfair and deceptive trade practices under the Maryland Consumer Protection Act. Md Code, Commercial Law § 14-3508.

References: § 14
 § 14
 § 14
 § 14
 § 14
 § 14