<?xml version='1.0' encoding='utf-8'?>
<section article="gcl" article_name="Commercial Law" number="14-3402" title_number="14" title_name="Miscellaneous Consumer Protection Provisions" subtitle_number="34" subtitle_name="The Social Security Number Privacy Act">
  <level label="a">
    <text>Except as otherwise provided in this subtitle, a person may not:</text>
    <level label="1">
      <text>Publicly post or display an individual’s Social Security number;</text>
    </level>
    <level label="2">
      <text>Print an individual’s Social Security number on a card required for the individual to access products or services provided by the person;</text>
    </level>
    <level label="3">
      <text>Require an individual to transmit the individual’s Social Security number over the Internet unless the connection is secure or the individual’s Social Security number is encrypted;</text>
    </level>
    <level label="4">
      <text>Initiate the transmission of an individual’s Social Security number over the Internet unless the connection is secure or the Social Security number is encrypted;</text>
    </level>
    <level label="5">
      <text>Require an individual to use the individual’s Social Security number to access an Internet website, unless a password, unique personal identification number, or other authentication device is also required to access the website; or</text>
    </level>
    <level label="6">
      <text>Unless required by State or federal law:</text>
      <level label="i">
        <text>Print an individual’s Social Security number on any material that is mailed to the individual;</text>
      </level>
      <level label="ii">
        <text>Include an individual’s Social Security number in any material that is electronically transmitted to the individual, unless the connection is secure or the individual’s Social Security number is encrypted; or</text>
      </level>
      <level label="iii">
        <text>Include an individual’s Social Security number in any material that is transmitted by facsimile to the individual.</text>
      </level>
    </level>
  </level>
  <level label="b">
    <text>This section does not apply to:</text>
    <level label="1">
      <text>The collection, release, or use of an individual’s Social Security number as required by State or federal law;</text>
    </level>
    <level label="2">
      <text>The inclusion of an individual’s Social Security number in an application, form, or document sent by mail, electronically transmitted, or transmitted by facsimile:</text>
      <level label="i">
        <text>As part of an application or enrollment process;</text>
      </level>
      <level label="ii">
        <text>To establish, amend, or terminate an account, contract, or policy; or</text>
      </level>
      <level label="iii">
        <text>To confirm the accuracy of the individual’s Social Security number;</text>
      </level>
    </level>
    <level label="3">
      <text>The use of an individual’s Social Security number for internal verification or administrative purposes; or</text>
    </level>
    <level label="4">
      <text>An interactive computer service provider’s or a telecommunications provider’s transmission or routing of, or intermediate temporary storage or caching of, an individual’s Social Security number.</text>
    </level>
  </level>
  <level label="c">
    <text>This section does not impose a duty on an interactive computer service provider or a telecommunications provider actively to monitor its service or affirmatively to seek evidence of the transmission of Social Security numbers on its service.</text>
  </level>
</section>
