Social Security Number Privacy Act
MD SSN Privacy Act
Data security
This law restricts how businesses display and transmit Social Security numbers. It bars publicly posting SSNs, printing them on access cards, requiring or sending them over unsecured internet connections, and using them alone as a website login, and limits SSNs in mailed, emailed, or faxed materials.
- Where
- Maryland
- Citation
- Md. Code, Com. Law §§ 14-3401 to 14-3402
- Status
- In force
- Enforced by
- Consumer Protection Division, Office of the Attorney General (Com. Law 13-301(14)(xxi))
- People can sue
- Yes
- Penalties
- A violation is an unfair, abusive, or deceptive trade practice under the Maryland Consumer Protection Act (13-301(14)(xxi)), subject to civil penalties up to $10,000 per violation ($25,000 repeat) under 13-410 and the private action for actual damages under 13-408.
- Applies to
- Any person, including individuals and commercial entities, but not units of State or local government (14-3401(c))
- Exceptions for uses required by law, SSNs in applications or account documents sent by mail, secure electronic means, or fax, internal verification or administrative use, and transmission by internet or telecom providers (14-3402(b))
Practices it requires
- Do not publicly post or display an individual's Social Security number, or print it on a card needed to access products or services.Com. Law 14-3402(a)(1)-(2)
- Unless required by law, do not print an SSN on mailed materials, include it in unsecured electronic transmissions, or send it by fax.Com. Law 14-3402(a)(6) · Only if: Exceptions for applications, enrollment, account changes, and SSN verification (14-3402(b)(2))
Security duties
- Do not require or initiate transmission of an SSN over the internet unless the connection is secure or the SSN is encrypted.Com. Law 14-3402(a)(3)-(4)
- Do not require an SSN to access a website unless a password, PIN, or other authentication is also required.Com. Law 14-3402(a)(5)
Sources
- Official text
- Md. Code, Com. Law § 14-3401 (definitions)
- Md. Code, Com. Law § 14-3402 (prohibitions)
- Md. Code, Com. Law § 13-301 (violation of Subtitle 34 is an unfair practice)
Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.
Unverified: Enactment year and first effective date not verified (older than the mgaleg chapter archive).
Research reference, not legal advice.