State Codes and Statutes
Statutes > Maryland > Commercial-law > Title-14 > Subtitle-35 > 14-3502§ 14-3502. Protection against unauthorized access or use.
(a) "Customer" defined.- In this section, "customer" means an individual residing in the State who provides personal information to a business for the purpose of purchasing or leasing a product or obtaining a service from the business.
(b) Destruction of records.- When a business is destroying a customer's records that contain personal information of the customer, the business shall take reasonable steps to protect against unauthorized access to or use of the personal information, taking into account:
(1) The sensitivity of the records;
(2) The nature and size of the business and its operations;
(3) The costs and benefits of different destruction methods; and
(4) Available technology.
[2007, chs. 531, 532.]
