Local Government (GLG) — Title 31. Baltimore City Youth Data Hub
Statutes in effect as of October 1, 2026.
Subtitle 1
Md. Code Ann., Local Gov't § 31-101 (2026)
Title 31. Baltimore City Youth Data Hub
Subtitle 1
§ 31–101LinkCopy Citation
(a)
In this title the following words have the meanings indicated.
(b)
“Aggregate” means to correlate, link, or associate personally identifiable information from one provider with personally identifiable information from any other provider inside the Baltimore City Youth Data Hub.
(c)
“Authorized purpose” means an evidence–based, testable inquiry that is intended to yield results that further the purpose of the Baltimore City Youth Data Hub.
(d)
“Baltimore City Youth Data Hub” means an integrated, electronic data management system that links data about youth from any provider.
(e)
(1)
“Data” means any information about a youth.
(2)
“Data” includes names, addresses, telephone numbers, dates of birth, information on gender, ethnicity, and English language proficiency, family or personal incomes, other family data, Social Security numbers, student or employee identification numbers, enrollment and attendance dates, performance information in any jobs, internships, schools, or other programs, current and past health information, including birth weights, maternal health at birth, and exposure to lead, and information on the receipt individually or by family of welfare benefits.
(f)
(1)
“Data recipient” means any individual, agency, or entity that receives de–identified data from the Baltimore City Youth Data Hub for analysis, research, or evaluation purposes.
(2)
“Data recipient” includes the manager or a provider.
(g)
“De–identified data” means any personally identifiable information that is permanently removed in a manner that leaves no reasonable basis to believe that the remaining information can be used to successfully link the de–identified data to a particular individual.
(h)
“Executive committee” means the body that provides vision, oversight, and leadership for the Baltimore City Youth Data Hub.
(i)
“Manager” means the nongovernmental custodian of the Baltimore City Youth Data Hub responsible for its operation, upkeep, and security.
(j)
“Personally identifiable information” includes:
(1)
an individual’s name;
(2)
the name of an individual’s parent or other family members;
(3)
the address of an individual or an individual’s family members;
(4)
a personal identifier, including an individual’s Social Security number, student identification number, or biometric record;
(5)
an indirect identifier, including an individual’s date of birth, place of birth, or mother’s maiden name; and
(6)
any data that, either alone or in combination, would tend to associate or link a piece of information with a particular individual in a manner that would allow a reasonable person in the community to identify the particular individual.
(k)
“Provider” means:
(1)
the Mayor and City Council of Baltimore City;
(2)
Baltimore’s Promise; and
(3)
the Baltimore City Board of School Commissioners.
(l)
“Secure” means to implement a comprehensive data security program to maintain data in strict confidence and protect personally identifiable information and de–identified data aggregated through the Baltimore City Youth Data Hub from unauthorized access, use, modification, or disclosure.
(m)
“Youth” means any person under the age of 21 years who:
(1)
resides in Baltimore City;
(2)
attends or graduated from an elementary or secondary school in Baltimore City; or
(3)
participates in or graduated from any youth program in Baltimore City.
Md. Code Ann., Local Gov't § 31-102 (2026)
Title 31. Baltimore City Youth Data Hub
Subtitle 1
§ 31–102LinkCopy Citation
(a)
There is a Baltimore City Youth Data Hub in Baltimore City.
(b)
The purpose of the Baltimore City Youth Data Hub is:
(1)
to promote the health, safety, security, and well–being of youth; and
(2)
to improve equitable access to and the overall cost–efficiency of programs serving youth.
Md. Code Ann., Local Gov't § 31-103 (2026)
Title 31. Baltimore City Youth Data Hub
Subtitle 1
§ 31–103LinkCopy Citation
(a)
The executive committee consists of:
(1)
the Mayor of Baltimore City, or the Mayor’s designee;
(2)
the Chief Executive Officer of the Baltimore City Public School System, or the Chief Executive Officer’s designee; and
(3)
any other individuals selected by the Mayor.
(b)
The executive committee shall:
(1)
oversee the Baltimore City Youth Data Hub; and
(2)
appoint and oversee the manager of the Baltimore City Youth Data Hub.
(c)
(1)
The executive committee shall establish an advisory committee of community stakeholders, including representatives from nonprofit organizations, faith–based institutions, community resident associations, and members from the larger community.
(2)
The purpose of the advisory committee is to increase awareness of and provide feedback on the Baltimore City Youth Data Hub.
Md. Code Ann., Local Gov't § 31-104 (2026)
Title 31. Baltimore City Youth Data Hub
Subtitle 1
§ 31–104LinkCopy Citation
(a)
The manager shall operate the Baltimore City Youth Data Hub.
(b)
The manager shall be a citywide entity that aims to improve outcomes for youth, with a specific focus on youth from historically marginalized communities.
(c)
The manager shall aggregate promptly and properly personally identifiable information received from providers.
(d)
(1)
Subject to paragraph (2) of this subsection, the manager may contract with a technology vendor or other professional.
(2)
If the manager contracts with a technology vendor or other professional to code, create, or assist with the operation of the Baltimore City Youth Data Hub, the technology vendor or professional is subject to the requirements of this title related to the manager.
(e)
(1)
The manager is not subject to the Public Information Act or the Open Meetings Act.
(2)
The records for which the manager is a custodian are not subject to the Public Information Act.
Md. Code Ann., Local Gov't § 31-105 (2026)
Title 31. Baltimore City Youth Data Hub
Subtitle 1
§ 31–105LinkCopy Citation
(a)
Notwithstanding any other provision of law, any local governmental entity and the Baltimore City Board of School Commissioners may provide personally identifiable information and data for the Baltimore City Youth Data Hub.
(b)
On request of the manager, a provider may submit and update personally identifiable information related to the Baltimore City Youth Data Hub’s purpose on a rolling or real–time basis.
(c)
Each provider and its clients, students, or participants, as appropriate, shall retain ownership of:
(1)
the data provided by the provider; and
(2)
the de–identified data and any new data element, including derivative files generated as a result of the data provided by the provider to the Baltimore City Youth Data Hub.
Md. Code Ann., Local Gov't § 31-106 (2026)
Title 31. Baltimore City Youth Data Hub
Subtitle 1
§ 31–106LinkCopy Citation
(a)
The Baltimore City Youth Data Hub and manager may use only aggregated, de–identified data for conducting any analysis, research, and reporting to the executive committee, the public, or otherwise.
(b)
Direct access to personally identifiable information in the Baltimore City Youth Data Hub shall be restricted to the manager and the manager’s authorized staff or contractors only for authorized purposes and lawful quality control.
(c)
On the receipt of data, the manager or its designated technology vendor shall work with providers to promptly extract and upload the data into the Baltimore City Youth Data Hub’s data management system for aggregation and de–identification.
(d)
Immediately after aggregating personally identifiable information in the data management system, the manager shall destroy any copies of the personally identifiable information existing outside the data management system in a manner such that, after aggregation, the manager does not possess or retain any personally identifiable information outside the data management system.
(e)
The Baltimore City Youth Data Hub may not use its data management system for queries to produce any personally identifiable information or reports that contain any personally identifiable information.
Md. Code Ann., Local Gov't § 31-107 (2026)
Title 31. Baltimore City Youth Data Hub
Subtitle 1
§ 31–107LinkCopy Citation
(a)
(1)
The manager shall promptly review any query requested by a provider.
(2)
The manager may run queries for individuals or entities that are not providers.
(b)
Before approving a query, the manager, with assistance from technical experts identified by the executive committee, shall conduct an in–depth review of the proposed query for consistency with authorized purposes, alignment with evidence–based standards for equitable, ethical, and methodologically appropriate inquiries, and assessment of the benefits for and impact on the greater Baltimore City community.
(c)
Before providing any data in response to a query, the manager shall obtain written approval from any provider of data to confirm that there is no reasonable basis to believe that de–identified data provided in response to a query could be used by a data recipient to successfully link de–identified data to a particular individual, based on the size or uniqueness of the population under consideration in the query, or otherwise.
(d)
The manager shall ensure that the data management system and provided data are secure using security standards and protocols that address, at a minimum, data security and access, security incident and disaster recovery procedures, and recording and monitoring of system activity.
(e)
The manager shall maintain appropriate administrative, physical, and technical safeguards that protect privacy, confidentiality, integrity, and availability of any data in compliance with the federal Family Educational Rights and Privacy Act and other relevant privacy laws and policies, including:
(1)
the required use of de–identified data in data research and reporting;
(2)
the required disposition of data that is no longer needed;
(3)
providing data security, including the capacity for audit trails;
(4)
providing for the performance of regular audits for compliance with data privacy and security standards; and
(5)
implementing guidelines and policies that prevent the reporting of other potentially personally identifiable information.
(f)
The manager shall ensure that a query of the data management system:
(1)
results in disclosure of only aggregated de–identified data or aggregated de–identified data reports to a data recipient; and
(2)
does not reveal personally identifiable information to a data recipient.
(g)
On request, the manager may provide technical assistance to data recipients regarding data received from the Baltimore City Youth Data Hub.
(h)
(1)
The manager and any data recipients may not:
(i)
attempt to re–identify de–identified data; or
(ii)
disclose, release, or report data in any form that may result in the re–identification of de–identified data.
(2)
This subsection may not be construed to interfere with a data recipient’s continued use of or reliance on personally identifiable information provided to the Baltimore City Youth Data Hub.
Md. Code Ann., Local Gov't § 31-108 (2026)
Title 31. Baltimore City Youth Data Hub
Subtitle 1
§ 31–108LinkCopy Citation
Each year, the Baltimore City Youth Data Hub shall publish a report that is available and accessible to the public on:
(1)
the implementation of the data management system, including identification of the sources and types of data received by the Baltimore City Youth Data Hub from each provider during the immediately preceding 12 months;
(2)
a description of each approved disclosure of data by the Baltimore City Youth Data Hub;
(3)
a list of publications and other reports based on the Baltimore City Youth Data Hub data;
(4)
recommendations and best practices for enhancement and alignment of data collection and maintenance by providers; and
(5)
any other information considered appropriate by the executive committee.
Md. Code Ann., Local Gov't § 31-109 (2026)
Title 31. Baltimore City Youth Data Hub
Subtitle 1
§ 31–109LinkCopy Citation
(a)
A person, whether acting on behalf of the manager or a provider, who obtains, discloses, or uses, or attempts to obtain, disclose, or use identifiable data for a purpose other than aggregation in the Baltimore City Youth Data Hub is guilty of a misdemeanor and on conviction is subject to imprisonment not exceeding 1 year or a fine not exceeding $1,000 or both.
(b)
A person, whether acting on behalf of the manager or a provider, is civilly liable to an individual for actual damages, including attorney’s fees and litigation costs, that the court considers appropriate if the court finds by clear and convincing evidence that the person committed a violation of any provision of this title that caused any damage to the individual.
Md. Code Ann., Local Gov't § 31-110 (2026)
Title 31. Baltimore City Youth Data Hub
Subtitle 1
§ 31–110LinkCopy Citation
Notwithstanding any other provision of law, and except as provided in § 31–109 of this title, a provider may not be civilly or criminally liable for providing identifiable data to the manager for the sole purpose of inclusion in the Baltimore City Youth Data Hub.