§ 14-4706

(a) (1) A consumer may designate an individual to serve as the consumer’s authorized agent and act on the consumer’s behalf to opt out of the processing of the consumer’s personal data for one or more of the purposes specified in § 14–4705(b)(7) of this subtitle.

(2) A consumer may designate an authorized agent by an Internet link or a browser setting, browser extension, global device setting, or other similar technology, indicating a consumer’s intent to opt out of the processing of the consumer’s personal data.

(b) A controller shall comply with an opt–out request received from an authorized agent if, using commercially reasonable efforts, the controller is able to authenticate:

(1) The identity of the consumer; and

(2) The authorized agent’s authority to act on the consumer’s behalf.