<?xml version='1.0' encoding='utf-8'?>
<section article="gsg" article_name="State Government" number="4-112" title_number="4" title_name="Comptroller" subtitle_number="1" subtitle_name="Definitions; General Provisions">
  <level label="a">
    <level label="1">
      <text>In this section the following words have the meanings indicated.</text>
    </level>
    <level label="2">
      <text>“Aggregated data” means de–identified data that is summarized by type of program of study or educational institution.</text>
    </level>
    <level label="3">
      <text>“Student information” means:</text>
      <level label="i">
        <text>student Social Security number;</text>
      </level>
      <level label="ii">
        <text>program of study;</text>
      </level>
      <level label="iii">
        <text>enrollment; and</text>
      </level>
      <level label="iv">
        <text>name of educational institution.</text>
      </level>
    </level>
    <level label="4">
      <text>“Tax information” means income tax records, wage information, and other data stored by the Comptroller.</text>
    </level>
  </level>
  <level label="b">
    <level label="1">
      <text>In accordance with the protocol established under § 24–703.2 of the Education Article, the Comptroller shall:</text>
      <level label="i">
        <text>match student information received from the Maryland Longitudinal Data System Center with tax information maintained by the Comptroller; and</text>
      </level>
      <level label="ii">
        <text>for research purposes, produce aggregated data from the matched information on the average amount of wage or salary earnings from self–employment or other sources of income for individuals within each educational institution or program of study.</text>
      </level>
    </level>
    <level label="2">
      <text>The Comptroller may not produce any aggregated data that may be identifiable based on the size or uniqueness of the population under consideration.</text>
    </level>
  </level>
  <level label="c">
    <text>The Comptroller shall follow and utilize privacy and security standards developed for the protocol, including:</text>
    <level label="1">
      <text>data retention and disposition policies;</text>
    </level>
    <level label="2">
      <text>authorized access and authentication for authorized access policies;</text>
    </level>
    <level label="3">
      <text>privacy compliance standards; and</text>
    </level>
    <level label="4">
      <text>breach notification and procedures.</text>
    </level>
  </level>
  <level label="d">
    <text>The Comptroller shall comply with any data privacy and security standards in accordance with the federal Family Educational Rights and Privacy Act and other relevant privacy laws and policies.</text>
  </level>
</section>
