Md. Code, General Provisions § 4–102

The State, a political subdivision, or a unit of the State or of a political subdivision may keep only the information about a person that:

(1) is needed by the State, the political subdivision, or the unit to accomplish a governmental purpose that is authorized or required to be accomplished under:

(i) a statute or any other legislative mandate;

(ii) an executive order of the Governor;

(iii) an executive order of the chief executive of a local jurisdiction; or

(iv) a judicial rule; and

(2) is relevant to accomplishment of the purpose.