<?xml version='1.0' encoding='utf-8'?>
<regulation prefix="Regulation" num=".03" citation="COMAR 09.12.22.03" title_num="09" subtitle_num="12" chapter_num="22" heading="Definition.">
  <paragraph num="A.">
    <text>The definitions set forth in COMAR 09.12.20 apply to this chapter.</text>
  </paragraph>
  <paragraph num="B.">
    <text>For the purpose of this chapter, “personally identifiable employee medical information”:</text>
    <paragraph num="(1)">
      <text>Means employee medical information accompanied by either:</text>
      <paragraph num="(a)">
        <text>Direct identifiers, including:</text>
        <paragraph num="(i)">
          <text>Name,</text>
        </paragraph>
        <paragraph num="(ii)">
          <text>Address,</text>
        </paragraph>
        <paragraph num="(iii)">
          <text>Social Security number,</text>
        </paragraph>
        <paragraph num="(iv)">
          <text>Payroll number; or</text>
        </paragraph>
      </paragraph>
      <paragraph num="(b)">
        <text>Information which could reasonably be used indirectly to identify specific employees, including:</text>
        <paragraph num="(i)">
          <text>Exact age,</text>
        </paragraph>
        <paragraph num="(ii)">
          <text>Height,</text>
        </paragraph>
        <paragraph num="(iii)">
          <text>Weight,</text>
        </paragraph>
        <paragraph num="(iv)">
          <text>Race,</text>
        </paragraph>
        <paragraph num="(v)">
          <text>Sex,</text>
        </paragraph>
        <paragraph num="(vi)">
          <text>Date of initial employment, or</text>
        </paragraph>
        <paragraph num="(vii)">
          <text>Job title;</text>
        </paragraph>
      </paragraph>
    </paragraph>
    <paragraph num="(2)">
      <text>Does not include:</text>
      <paragraph num="(a)">
        <text>Aggregate employee medical information or medical records on individual employees not in a personally identifiable form;</text>
      </paragraph>
      <paragraph num="(b)">
        <text>Personally identifiable employee medical information obtained in the course of litigation;</text>
      </paragraph>
      <paragraph num="(c)">
        <text>Records required by COMAR 09.12.21;</text>
      </paragraph>
      <paragraph num="(d)">
        <text>Death certificates; or</text>
      </paragraph>
      <paragraph num="(e)">
        <text>Employee exposure records, including biological monitoring records which constitute exposure records under either 29 CFR §1910.1020(c)(5) or specific occupational safety and health standards.</text>
      </paragraph>
    </paragraph>
  </paragraph>
</regulation>