Section 14-3502 - Protection against unauthorized access or use. - Maryland Statutes

§ 14-3502. Protection against unauthorized access or use.
 

(a)  "Customer" defined.- In this section, "customer" means an individual residing in the State who provides personal information to a business for the purpose of purchasing or leasing a product or obtaining a service from the business. 

(b)  Destruction of records.- When a business is destroying a customer's records that contain personal information of the customer, the business shall take reasonable steps to protect against unauthorized access to or use of the personal information, taking into account: 

(1) The sensitivity of the records; 

(2) The nature and size of the business and its operations; 

(3) The costs and benefits of different destruction methods; and 

(4) Available technology. 
 

[2007, chs. 531, 532.]