State Breach Law
Maryland Data Breach Notification Law
Md. Code Ann., Com. Law §§ 14-3501 to 14-3508 • Effective 2008-01-01
Maryland gives you 45 days to notify affected residents and the Attorney General. Stricter than many states.
Notification deadline: 45 days
Enforcement: Maryland Attorney General
Overview
Maryland requires notification within 45 days of breach discovery. AG notification required for all breaches.
Who Must Be Notified
- • Affected Maryland residents
- • Maryland Attorney General
Covered Data Types
Social Security number, Driver's license number, Financial account numbers, Health information, Biometric data
Notification Requirements
- • Written notice
- • Must include description of breach
- • Contact information required
Is your business exposed?
Exemptions
- • Encrypted data
- • Good faith acquisition
Penalties
Up to $1,000 per violation, $100,000 max per breach
If You Experience a Breach
- 1.
Notify AG and residents within 45 days
Official Source
https://www.marylandattorneygeneral.gov/Is your business exposed?
Check if your company data is circulating on the dark web
Free scan • No credit card required