Maryland enacted the Personal Information Protection Act, legislation aiming to protect Maryland consumers’ personal identifying information and ensure they are notified in the event it is compromised. Information from Maryland Attorney General Brian Frosh said the legislation “contains provisions for notification of consumers in the event of a data security breach and for reasonable security measures to protect consumers’ personal identifying information.” Under the legislation, consumers must receive notice of a breach within 45 days.