Maryland Code § CL-14-3507

Section CL-14-3507
Open in Lexace · Ask the AI about this section
(a) In this section, "affiliate" means a company that controls, is controlled
by, or is under common control with a business described in subsection (c)(1) or (d)(1)
of this section.
(b) A business that complies with the requirements for notification
procedures, the protection or security of personal information, or the destruction of
personal information under the rules, regulations, procedures, or guidelines
established by the primary or functional federal or State regulator of the business
shall be deemed to be in compliance with this subtitle.

(c) (1) A business that is subject to and in compliance with § 501(b) of
the federal Gramm-Leach-Bliley Act, 15 U.S.C. § 6801, § 216 of the federal Fair and
Accurate Credit Transactions Act, 15 U.S.C. § 1681w, the federal Interagency
Guidelines Establishing Information Security Standards, and the federal
Interagency Guidance on Response Programs for Unauthorized Access to Customer
Information and Customer Notice, and any revisions, additions, or substitutions,
shall be deemed to be in compliance with this subtitle.
(2) An affiliate that complies with § 501(b) of the federal Gramm-
Leach-Bliley Act, 15 U.S.C. § 6801, § 216 of the federal Fair and Accurate Credit
Transactions Act, 15 U.S.C. § 1681w, the federal Interagency Guidelines Establishing
Information Security Standards, and the federal Interagency Guidance on Response
Programs for Unauthorized Access to Customer Information and Customer Notice,
and any revisions, additions, or substitutions, shall be deemed to be in compliance
with this subtitle.
(d) (1) A business that is subject to and in compliance with the federal
Health Insurance Portability and Accountability Act of 1996 shall be deemed to be in
compliance with this subtitle.
(2) An affiliate that is in compliance with the federal Health
Insurance Portability and Accountability Act of 1996 shall be deemed to be in
compliance with this subtitle.

‹ Prev All Maryland sections Next ›


Lexace provides legal information, not legal advice, and no attorney–client relationship is created. Statute text is provided for general information and may not reflect the most recent amendments; verify against the official state code.