← Global Privacy Laws Research Library
Md. Code, Commercial Law, Title 14, Subtitle 35
Maryland Personal Information Protection (Commercial Law §14-3501 onward)
Prepared by Shubhank Suman · Last reviewed
CURRENT / IN FORCE
- Legal character
- Statute
- Region
- North America
What it covers
Section 14-3501 defines business, encrypted, personal information and related terms. The subtitle requires businesses to take reasonable steps when destroying records, to implement reasonable security procedures, to require service providers to do the same, and after discovering a breach of the security of a system to investigate and notify affected Maryland residents and the Attorney General. Violations are unfair or deceptive trade practices.
Why it matters
It is Maryland's data security and breach notification law for any business holding residents' personal information.
Refer to it when
Use it for a security incident or security programme involving personal information of Maryland residents.
AI, privacy and cybersecurity relevance
- AI: Low
- Privacy: High
- Cyber: High
AI
LOW RELEVANCE
No AI-specific provisions.
Privacy
HIGH RELEVANCE
Breach notification to individuals.
Cybersecurity
HIGH RELEVANCE
Security procedures and incident response.
Applicability
Businesses that own, license or maintain personal information of Maryland residents.
Current validity
CURRENT. As amended. Read the official PDF on this page for the operative text.
Read first
Section 14-3501 → 14-3503 → 14-3504. The supplied PDF contains section 14-3501 only; read the remaining sections in the full subtitle.
Provisions / sections covered
Section 14-3501 – Definitions
Business, encrypted, health information and personal information.
Section 14-3502 – Destruction of records
Reasonable steps to protect information when destroyed.
Section 14-3503 – Security procedures
Reasonable security procedures and practices.
Section 14-3504 – Breach investigation and notification
Investigation, notice to individuals and the Attorney General.
Subject-matter tags
- Data breach
- Health data
- Enforcement and penalties
Subject-matter tags describe what the indexed text discusses. They are not legal conclusions.
Document page in the Knowledge Base - full text or PDF where it is available for this record.
This library locates primary and official sources. It does not interpret the law and it is not legal advice.