Md. Code, General Provisions § 4–306

A custodian shall deny inspection of a hospital record that:

(1) relates to:

(i) medical administration;

(ii) staff;

(iii) medical care; or

(iv) other medical information; and

(2) contains general or specific information about one or more individuals.