2017 Maryland Code
State Government
Title 10 - Governmental Procedures
Subtitle 13 - Protection of Information by Government Agencies
§ 10-1304. Security measures

  • (a) In general. -- To protect personal information from unauthorized access, use, modification, or disclosure, a unit that collects personal information of an individual shall implement and maintain reasonable security procedures and practices that are appropriate to the nature of the personal information collected and the nature of the unit and its operations.
  • (b) Requirements for third-party service providers. --
    • (1) This subsection shall apply to a written contract or agreement that is entered into on or after July 1, 2014.
    • (2) A unit that uses a nonaffiliated third party as a service provider to perform services for the unit and discloses personal information about an individual under a written contract or agreement with the third party shall require by written contract or agreement that the third party implement and maintain reasonable security procedures and practices that:
      • (i) are appropriate to the nature of the personal information disclosed to the nonaffiliated third party; and
      • (ii) are reasonably designed to help protect the personal information from unauthorized access, use, modification, disclosure, or destruction.
Disclaimer: These codes may not be the most recent version. Maryland may have more current or accurate information. We make no warranties or guarantees about the accuracy, completeness, or adequacy of the information contained on this site or the information linked to on the state site. Please check official sources.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.