§ 14-3506. Notification to credit reporting agencies.
(a) Breach involving 1,000 or more individuals.- If a business is required under § 14-3504 of this subtitle to give notice of a breach of the security of a system to 1,000 or more individuals, the business also shall notify, without unreasonable delay, each consumer reporting agency that compiles and maintains files on consumers on a nationwide basis, as defined by 15 U.S.C. § 1681a(p), of the timing, distribution, and content of the notices.
(b) Inclusion of names not required.- This section does not require the inclusion of the names or other personal identifying information of recipients of notices of the breach of the security of a system.
[2007, chs. 531, 532.]