This subtitle does not apply to personally identifiable information that: is publicly available information that is lawfully made available to the general public from federal, State, or local government records; an individual has consented to have publicly disseminated or listed; except for a medical record that a person is prohibited from redisclosing under § 4–302(d) of the Health – General Article, is disclosed in accordance with the federal Health Insurance Portability and Accountability Act; is disclosed in accordance with the federal Family Educational Rights and Privacy Act; is clinical information; or is information related to sponsored research. Compliance with this subtitle does not authorize a public institution of higher education to fail to comply with any other requirements of State or federal law relating to the protection and privacy of personally identifiable information.