{"data":{"id":"us-md/md.-code-commercial-law-14-4802","jurisdiction":"us-md","citation":"Md. Code, Commercial Law § 14–4802","heading":"","body":"This subtitle does not apply to:\n(1) Data subject to a statute or regulation identified under item (i) of this item that is controlled by a covered entity or service provider that is:\n(i) Required to comply with:\n1. Title V of the federal Gramm–Leach–Bliley Act;\n2. The federal Health Information Technology for Economic and Clinical Health Act; or\n3. Regulations promulgated under § 264(c) of the Health Insurance Portability and Accountability Act of 1996; and\n(ii) In compliance with the information security requirements of applicable statutes or regulations identified in item (i) of this item; or\n(2) Information collected as part of a clinical trial subject to the Federal Policy for the Protection of Human Subjects, in accordance with:\n(i) Good clinical practice guidelines issued by the International Council for Harmonisation of Technical Requirements for Pharmaceuticals for Human Use; or\n(ii) Human subject protection requirements of the U.S. Food and Drug Administration.","path":["Article - Commercial Law"],"source_url":"https://mgaleg.maryland.gov/mgawebsite/Laws/StatuteText?article=gcl\u0026section=14-4802","current_through":"2026-01-01","vintage":"","retrieved_at":"2026-09-14T19:56:33Z","sha256":"553c2f237858771a32a5daafc6a8bef9c60a6e6a1d89a0c4b2afc9568d92062b","source_id":"us-md","stale":false,"prev":"us-md/md.-code-commercial-law-14-4801","next":"us-md/md.-code-commercial-law-14-4803"},"notice":"GroundRules: Original legal text. Not legal advice."}