Md. Code, State Government § 10–1308

A unit or nonaffiliated third party that complies with § 501(b) of the federal Gramm–Leach–Bliley Act; 15 U.S.C. § 6801, § 216 of the federal Fair and Accurate Credit Transactions Act; 15 U.S.C. § 1681w Disposal of Records; the federal Interagency Guidelines Establishing Information Security Standards; and the federal Interagency Guidance on Response Programs for Unauthorized Access to Customer Information and Customer Notice; and any revisions, additions, or substitutions of those enactments, shall be deemed to be in compliance with this subtitle.