<?xml version='1.0' encoding='utf-8'?>
<baltimore-city-law heading="§ 38-12 Data sharing requirements.">
  <section prefix="§" num="38-12" heading="Data sharing requirements.">
    <para num="(a)" heading="In general.">As a condition to holding a permit, a provider must submit data and reports as required by the Director in a format determined by the Director.</para>
    <para num="(b)" heading="Confidentiality.">
      <para num="(1)">Except as otherwise required by law, the data and reports provided to the Department under this section must be kept confidential.</para>
      <para num="(2)">If disclosure of the data and reports is required by law, the Department must provide the provider with reasonable prior notice of the disclosure.</para>
    </para>
    <para num="(c)" heading="User privacy protections.">
      <para num="(1)">A provider must establish a privacy policy approved by the Department that safeguards user information.</para>
      <para num="(2)">The data and reports provided to the Department under this section may not include information that can reasonably be used to contact or distinguish a person, including IP addresses or device identifiers.</para>
    </para>
    <para num="(d)" heading="Departmental reports.">
      <para num="(1)">The Department must report the data provided under this section on the Department’s website.</para>
      <para num="(2)">The content and timing of the data reported under this subsection must be:<para num="(i)">determined by the Director; and</para>
        <para num="(ii)">compliant with all applicable laws.</para>
      </para>
    </para>
    <annotation type="History">Ord. 19-251</annotation>
  </section>
</baltimore-city-law>
