Establishing generally the manner in which a controller or a processor may process a consumer's personal data; authorizing a consumer to exercise certain rights in regards to the consumer's personal data; requiring a controller of personal data to establish a method for a consumer to exercise certain rights in regards to the consumer's personal data; making a violation of the Act an unfair, abusive, or deceptive trade practice that is subject to enforcement and penalties under the Maryland Consumer Protection Act; etc.