# State Government (GSG)

## Title 10. Governmental Procedures

### Subtitle 13A. Protection of Personally Identifiable Information by Public Institutions of Higher Education

#### Section 10-13A-02

(a) This subtitle does not apply to personally identifiable information that:

  (1) is publicly available information that is lawfully made available to the general public from federal, State, or local government records;

  (2) an individual has consented to have publicly disseminated or listed;

  (3) except for a medical record that a person is prohibited from redisclosing under Sec. 4-302(d) of the Health - General Article, is disclosed in accordance with the federal Health Insurance Portability and Accountability Act;

  (4) is disclosed in accordance with the federal Family Educational Rights and Privacy Act;

  (5) is clinical information; or

  (6) is information related to sponsored research.

(b) Compliance with this subtitle does not authorize a public institution of higher education to fail to comply with any other requirements of State or federal law relating to the protection and privacy of personally identifiable information.

---

Md. Code Ann., State Gov't (as displayed at mgaleg.maryland.gov, October 16, 2026)