Maryland Code, Health-General § 4-310

(1) The Attorney General or the Attorney General's designee;

(2) The Executive Director of the Maryland Health Care Commission or the Executive Director's designee; and

(3) The following members appointed by the Secretary:

(1) Select a chair of the Commission each year; and

(2) Meet at least four times a year.

(f)(1) The Commission shall identify sensitive health services information by diagnosis, procedural, medication, or related codes for which disclosure by a health information exchange or electronic health network to a treating provider, business entity, another health information exchange, or another electronic health network would create a substantial risk to patients or health care providers.

(2) In carrying out its work, the Commission may consult with:

(g)(1) The Commission shall issue semiannual reports to the Secretary on recommendations regarding sensitive health services that should be determined by the Secretary to be legally protected health care under this subtitle or for which the Secretary should rescind a previous determination.

(2) The reports shall include an assessment of the potential risk to patients and health care providers that would result from the disclosure of the sensitive health services that are addressed in the reports.

(3) Within 60 days after receiving a semiannual report under paragraph (1) of this subsection, the Secretary shall submit a written response to the report that includes the findings and determinations of the Secretary to: