Maryland Code, Commercial Law § 14-4403

(1) A high-level overview of the company's privacy policy that includes basic and essential information about how the company collects, uses, and discloses genetic data; and

(2) A privacy notice that, at a minimum, includes information about the company's data collection, consent, use, access, disclosure, transfer, security, and retention and deletion practices.

(1) Made publicly available; and

(2) Placed in a prominent area of the direct-to-consumer genetic testing company's website.