Can I collect personal information from my customers in California in Maryland? What are the requirements?

Yes, you can collect personal information from your customers in California while being in Maryland, but you must comply with the restrictions on the collection and use of personal information set forth in 11 CACR Section 7002. According to this section, a business’s collection, use, retention, and/or sharing of a consumer’s personal information shall be reasonably necessary and proportionate to achieve the purpose(s) for which the personal information was collected or processed. The purpose(s) for which the personal information was collected or processed shall be consistent with the reasonable expectations of the consumer(s) whose personal information is collected or processed. The business shall obtain the consumer’s consent before collecting or processing personal information for any purpose that does not meet the requirements set forth in subsection (a). If the business intends to collect additional categories of personal information or intends to use the personal information for additional purposes that are incompatible with the disclosed purpose for which the personal information was collected, the business shall provide a new Notice at Collection. However, any additional collecting or processing of personal information shall comply with subsection (a) ^[2.1].

Source(s):

• [2.1] Restrictions on the Collection and Use of Personal Information.

Jurisdiction

California, Maryland

• Privacy