2017 Maryland Code
Commercial Law
Title 14 - Miscellaneous Consumer Protection Provisions
Subtitle 35 - Maryland Personal Information Protection Act.
§ 14-3502. Protection against unauthorized access or use (Amendment effective January 1, 2018.)

  • (a) "Customer" defined. -- In this section, "customer" means an individual residing in the State who provides personal information to a business for the purpose of purchasing or leasing a product or obtaining a service from the business.
  • (b) Destruction of records. -- When a business is destroying a customer's, an employee's, or a former employee's records that contain personal information of the customer, employee, or former employee, the business shall take reasonable steps to protect against unauthorized access to or use of the personal information, taking into account:
    • (1) The sensitivity of the records;
    • (2) The nature and size of the business and its operations;
    • (3) The costs and benefits of different destruction methods; and
    • (4) Available technology.
Disclaimer: These codes may not be the most recent version. Maryland may have more current or accurate information. We make no warranties or guarantees about the accuracy, completeness, or adequacy of the information contained on this site or the information linked to on the state site. Please check official sources.