Requiring the Maryland Health Care Commission to adopt regulations for the privacy and security of protected health information obtained or released through a health information exchange by specified persons; requiring the regulations to include protections for the secondary use of specified information; providing that the regulations do not apply to protected health information exchanged between and among specified persons; etc.