Md. Code, Insurance § 31–207

(a) The Exchange shall develop a detailed set of data privacy and data security safeguards to govern the conveyance, storage, and utilization of data under the Program.

(b) The safeguards developed under subsection (a) of this section shall ensure that the conveyance, storage, and utilization of data under the Program comply with applicable requirements of federal and State law.