# Commercial Law (GCL)

## Title 14. Miscellaneous Consumer Protection Provisions

### Subtitle 48. Maryland Age-Appropriate Design Code Act

#### Section 14-4807

(a) Within 5 business days after receiving a written request from the Division, a covered entity that provides an online product reasonably likely to be accessed by children shall provide to the Division a list of all data protection impact assessments the covered entity has completed under Sec. 14-4804 of this subtitle.

(b)

  (1) Within 7 business days after receiving a written request from the Division, a covered entity shall provide to the Division any data protection impact assessment completed under Sec. 14-4804 of this subtitle.

  (2) The Division may extend beyond 7 days the amount of time allowed for a covered entity to produce a data protection impact assessment.

(c) To the extent that any disclosure required under subsection (b) of this section includes information subject to attorney-client privilege or work-product protection, the disclosure may not constitute a waiver of that privilege or protection.

---

Md. Code Ann., Com. Law (as displayed at mgaleg.maryland.gov, October 16, 2026)