{"data":{"id":"us-md/md.-code-commercial-law-14-4805","jurisdiction":"us-md","citation":"Md. Code, Commercial Law § 14–4805","heading":"","body":"A covered entity required to complete a data protection impact assessment under § 14–4804 of this subtitle shall:\n(1) Maintain documentation of the assessment for as long as the online product is likely to be accessed by children;\n(2) Review each data protection impact assessment as necessary to account for material changes to processing pertaining to the online product within 90 days of such material changes;\n(3) Notwithstanding any other law, configure all default privacy settings provided to children by the online product to offer a high level of privacy, unless the covered entity can demonstrate a compelling reason that a different setting is in the best interests of children;\n(4) Provide any privacy information, terms of service, policies, and community standards concisely, prominently, and using clear language suited to the age of children likely to access the online product; and\n(5) Provide prominent, accessible, and responsive tools to help children or their parents or guardians, if applicable, exercise their privacy rights and report concerns.","path":["Article - Commercial Law"],"source_url":"https://mgaleg.maryland.gov/mgawebsite/Laws/StatuteText?article=gcl\u0026section=14-4805","current_through":"2026-01-01","vintage":"","retrieved_at":"2026-09-14T19:56:33Z","sha256":"6221937d1d4526b353b47a96ae9b265af6218fe0cb0cd74b057ea4414315a85b","source_id":"us-md","stale":false,"prev":"us-md/md.-code-commercial-law-14-4804","next":"us-md/md.-code-commercial-law-14-4806"},"notice":"GroundRules: Original legal text. Not legal advice."}