§ 14-4807
146 words·~1 min read·
/md/commercial-law/14-4807A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
§14–4807.
(a)Within 5 business days after receiving a written request from the Division, a covered entity that provides an online product reasonably likely to be accessed by children shall provide to the Division a list of all data protection impact assessments the covered entity has completed under § 14–4804 of this subtitle.
(1)Within 7 business days after receiving a written request from the Division, a covered entity shall provide to the Division any data protection impact assessment completed under § 14–4804 of this subtitle.
(2)The Division may extend beyond 7 days the amount of time allowed for a covered entity to produce a data protection impact assessment.
(c)To the extent that any disclosure required under subsection
(b)of this section includes information subject to attorney–client privilege or work–product protection, the disclosure may not constitute a waiver of that privilege or protection.