In this subtitle the following words have the meanings indicated. “Interactive computer service provider” means an entity that provides a service that provides or enables computer access via the Internet by multiple users to a computer server or similar device used for the storage of images, information, or data. “Person” includes an individual, corporation, business trust, statutory trust, estate, trust, partnership, association, two or more persons having a joint or common interest, or any other commercial entity. “Person” does not include a unit of State or local government. “Publicly post or display” means to intentionally communicate or otherwise make available to the general public.

Except as otherwise provided in this subtitle, a person may not: Publicly post or display an individual’s Social Security number; Print an individual’s Social Security number on a card required for the individual to access products or services provided by the person; Require an individual to transmit the individual’s Social Security number over the Internet unless the connection is secure or the individual’s Social Security number is encrypted; Initiate the transmission of an individual’s Social Security number over the Internet unless the connection is secure or the Social Security number is encrypted; Require an individual to use the individual’s Social Security number to access an Internet website, unless a password, unique personal identification number, or other authentication device is also required to access the website; or Unless required by State or federal law: Print an individual’s Social Security number on any material that is mailed to the individual; Include an individual’s Social Security number in any material that is electronically transmitted to the individual, unless the connection is secure or the individual’s Social Security number is encrypted; or Include an individual’s Social Security number in any material that is transmitted by facsimile to the individual. This section does not apply to: The collection, release, or use of an individual’s Social Security number as required by State or federal law; The inclusion of an individual’s Social Security number in an application, form, or document sent by mail, electronically transmitted, or transmitted by facsimile: As part of an application or enrollment process; To establish, amend, or terminate an account, contract, or policy; or To confirm the accuracy of the individual’s Social Security number; The use of an individual’s Social Security number for internal verification or administrative purposes; or An interactive computer service provider’s or a telecommunications provider’s transmission or routing of, or intermediate temporary storage or caching of, an individual’s Social Security number. This section does not impose a duty on an interactive computer service provider or a telecommunications provider actively to monitor its service or affirmatively to seek evidence of the transmission of Social Security numbers on its service.