<?xml version='1.0' encoding='utf-8'?>
<regulation prefix="Regulation" num=".03" citation="COMAR 04.01.04.03" title_num="04" subtitle_num="01" chapter_num="04" heading="Annual Report.">
  <paragraph num="A.">
    <text>A unit or instrumentality of the State government which keeps personal records shall submit an annual report to the Secretary.</text>
  </paragraph>
  <paragraph num="B.">
    <text>This regulation does not apply to a:</text>
    <paragraph num="(1)">
      <text>Unit in the Legislative branch of State government;</text>
    </paragraph>
    <paragraph num="(2)">
      <text>Unit in the Judicial branch of State government; or</text>
    </paragraph>
    <paragraph num="(3)">
      <text>Board of license commissioners.</text>
    </paragraph>
  </paragraph>
  <paragraph num="C.">
    <text>The annual report shall state:</text>
    <paragraph num="(1)">
      <text>The name of the unit or instrumentality;</text>
    </paragraph>
    <paragraph num="(2)">
      <text>For each set of the personal records:</text>
      <paragraph num="(a)">
        <text>The name,</text>
      </paragraph>
      <paragraph num="(b)">
        <text>The location, and</text>
      </paragraph>
      <paragraph num="(c)">
        <text>If a subunit keeps the set, the name of the subunit;</text>
      </paragraph>
    </paragraph>
    <paragraph num="(3)">
      <text>For each set of personal records that has not been previously reported:</text>
      <paragraph num="(a)">
        <text>The category of individuals to whom the set applies,</text>
      </paragraph>
      <paragraph num="(b)">
        <text>A brief description of the types of information the set contains,</text>
      </paragraph>
      <paragraph num="(c)">
        <text>The major uses and purposes of the information,</text>
      </paragraph>
      <paragraph num="(d)">
        <text>By category, the source of information for the set, and</text>
      </paragraph>
      <paragraph num="(e)">
        <text>The policies and procedures of the unit or instrumentality as to access and challenges to the personal record by the person in interest and storage, retrieval, retention, disposal, and security, including controls on access;</text>
      </paragraph>
    </paragraph>
    <paragraph num="(4)">
      <text>For each set of personal records that has been disposed of or changed significantly since the unit or instrumentality last submitted a report, the information required under §C(3) of this regulation.</text>
    </paragraph>
  </paragraph>
  <paragraph num="D.">
    <text>A unit or instrumentality that has two or more sets of personal records may combine the personal records in the report only if the character of the personal records is highly similar.</text>
  </paragraph>
</regulation>