Md. Code, State Government § 10–13A–02

(a) This subtitle does not apply to personally identifiable information that:

(1) is publicly available information that is lawfully made available to the general public from federal, State, or local government records;

(2) an individual has consented to have publicly disseminated or listed;

(3) except for a medical record that a person is prohibited from redisclosing under § 4–302(d) of the Health – General Article, is disclosed in accordance with the federal Health Insurance Portability and Accountability Act;

(4) is disclosed in accordance with the federal Family Educational Rights and Privacy Act;

(5) is clinical information; or

(6) is information related to sponsored research.

(b) Compliance with this subtitle does not authorize a public institution of higher education to fail to comply with any other requirements of State or federal law relating to the protection and privacy of personally identifiable information.