When a unit is destroying records of an individual that contain personal information of the individual, the unit shall take reasonable steps to protect against unauthorized access to or use of the personal information, taking into account:
(1) the sensitivity of the records;
(2) the nature of the unit and its operations;
(3) the costs and benefits of different destruction methods; and
(4) available technology.
Structure Maryland Statutes
Title 10 - Governmental Procedures
Subtitle 13 - Protection of Information by Government Agencies
Section 10-1302 - Applicability Limitations
Section 10-1303 - Destruction of Records
Section 10-1304 - Security Measures
Section 10-1305 - Investigation and Notification on Breach of Security by System
Section 10-1306 - Preemption of Local Law
Section 10-1307 - Requirements for Notice to 1,000 or More Individuals
Section 10-1308 - Compliance With Federal Privacy Law Provisions Deemed Compliant With Subtitle