Unannotated Code of Maryland (Last Updated: May 16, 2014) |
COMMERCIAL LAW |
TITLE 14. MISCELLANEOUS CONSUMER PROTECTION PROVISIONS |
SUBTITLE 35. MARYLAND PERSONAL INFORMATION PROTECTION ACT. |
§ 14-3502. Protection against unauthorized access or use
Latest version.
-
(a) "Customer" defined. -- In this section, "customer" means an individual residing in the State who provides personal information to a business for the purpose of purchasing or leasing a product or obtaining a service from the business.
(b) Destruction of records. -- When a business is destroying a customer's records that contain personal information of the customer, the business shall take reasonable steps to protect against unauthorized access to or use of the personal information, taking into account:
(1) The sensitivity of the records;
(2) The nature and size of the business and its operations;
(3) The costs and benefits of different destruction methods; and
(4) Available technology.