§33–102.

MarylandStatutes

Ask Donna

How this section applies to your facts.

MD Code › Article gin › Title 33 › Subtitle 1 › Section 33-102

This text was captured on Aug 14, 2026. It is a snapshot, not a live feed, so check the official code before relying on it.

Text

(a) The purpose of this title is to establish standards for:

(1) data security; and

(2) the investigation of and notification to the Commissioner of a cybersecurity event applicable to carriers.

(b) This title may not be construed to:

(1) create or imply a private cause of action for violation of its provisions; or

(2) curtail a private cause of action which would otherwise exist in the absence of this title.

(c) Compliance with this title does not relieve a carrier from a duty to comply with any other requirements of federal law or Title 14 of the Commercial Law Article relating to the protection and privacy of personal information.

This is a copy of a public record, reproduced as it was published. It is not legal advice, and it may not be the version a court would rely on. Check the official source before you cite it.

A word about cookies

We need a few to keep you signed in and the library working. The rest help us see which pages people use and where they get stuck. They stay off unless you say yes.