684

LAWS OF MARYLAND

Ch. 10

(3) The use or disclosure is:

(i) Pursuant to obligations under federal or
State law;

(ii) At the direction of a governmental entity
pursuant to law; or

(iii) In response to the order of a court
having jurisdiction to issue the order[.];

(5) Except as provided in subsection (b) of this
section, disclosure is reasonably necessary in connection with:

(i) The sale or pledge, or negotiation of the
sale or pledge, of any portion of a business or the assets of a
business;

(ii) The management, operation, or other
activities involving the internal functioning of the person
making the disclosure; or

(iii) The management, operation, or other
activities involving disclosures between a corporation and its
subsidiaries or controlled affiliates or between the subsidiaries
or the controlled affiliates, provided that a disclosure for
marketing purposes may not be made if the holder of an active
credit card or payment device number has notified the issuer in
writing at an address specified by the issuer that such use is
not permitted. The issuer shall provide holders of active
accounts notice of such nondisclosure option and the specified
address on a periodic basis at the issuer's discretion provided
the time between such notifications does not exceed 1 year. The
issuer shall comply with such elections within 45 days after
receipt of the holder's response. The election shall remain in
effect until the holder rescinds the election or until there have
been no debits or credits to the account for a 12-month
period[.];

14-1405.

(a) (1) The Attorney General may institute a civil action
against any person who violates this [title] SUBTITLE to recover
for the State a penalty not to exceed $1,000 for each violation.

(2) For the purposes of this subsection, each
prohibited disclosure or use of a credit card number or other
payment device number shall be considered an independent
violation.

Article - Corporations and Associations

2-214.