Old | New | Differences | |
---|---|---|---|
1 | - | LAWRENCE J. HOGAN, JR., Governor Ch. 169 | |
2 | 1 | ||
3 | - | – 1 – | |
4 | - | Chapter 169 | |
5 | - | (House Bill 1276) | |
6 | 2 | ||
7 | - | AN ACT concerning | |
3 | + | EXPLANATION: CAPITALS INDICATE MAT TER ADDED TO EXISTIN G LAW. | |
4 | + | [Brackets] indicate matter deleted from existing law. | |
5 | + | Underlining indicates amendments to bill. | |
6 | + | Strike out indicates matter stricken from the bill by amendment or deleted from the law by | |
7 | + | amendment. | |
8 | + | Italics indicate opposite chamber/conference committee amendments. | |
9 | + | *hb1276* | |
8 | 10 | ||
9 | - | Baltimore City Youth Data Hub – Establishment | |
11 | + | HOUSE BILL 1276 | |
12 | + | L2, O4, S1 (2lr2513) | |
13 | + | ENROLLED BILL | |
14 | + | — Ways and Means/Education, Health, and Environmental Affairs — | |
15 | + | Introduced by Delegate Attar | |
10 | 16 | ||
11 | - | FOR the purpose of establishing the Baltimore City Youth Data Hub for the purpose of | |
12 | - | promoting well–being of youth and improving access to and cost–efficiency of youth | |
13 | - | programs; establishing an executive committee and providing for a manager to | |
14 | - | operate the Baltimore City Youth Data Hub; providing that certain activities of the | |
15 | - | executive committee and manager are not subject to the Open Meetings Act or the | |
16 | - | Public Information Act; authorizing certain entities to provide data to the Baltimore | |
17 | - | City Youth Data Hub; providing for the authorized uses and ownership of the data | |
18 | - | provided to the Baltimore City Youth Data Hub; establishing certain penalties and | |
19 | - | immunity under certain circumstances; and generally relating to the Baltimore City | |
20 | - | Youth Data Hub. | |
17 | + | Read and Examined by Proofreaders: | |
21 | 18 | ||
22 | - | BY adding to | |
23 | - | Article – Local Government | |
24 | - | Section 31–101 through 31–110 to be under the new title “Title 31. Baltimore City | |
25 | - | Youth Data Hub” | |
26 | - | Annotated Code of Maryland | |
27 | - | (2013 Volume and 2021 Supplement) | |
19 | + | _______________________________________________ | |
20 | + | Proofreader. | |
21 | + | _______________________________________________ | |
22 | + | Proofreader. | |
28 | 23 | ||
29 | - | SECTION 1. BE IT ENACTED BY THE GENERAL ASSEMBLY OF MARYLAND, | |
30 | - | That the Laws of Maryland read as follows: | |
24 | + | Sealed with the Great Seal and presented to the Governor, for his approval this | |
31 | 25 | ||
32 | - | ||
26 | + | _______ day of _______________ at ________________________ o’clock, ________M. | |
33 | 27 | ||
34 | - | TITLE 31. BALTIMORE CITY YOUTH DATA HUB. | |
28 | + | ______________________________________________ | |
29 | + | Speaker. | |
35 | 30 | ||
36 | - | ||
31 | + | CHAPTER ______ | |
37 | 32 | ||
38 | - | (A) IN THIS TITLE THE FOL LOWING WORDS HAVE TH E MEANINGS | |
39 | - | INDICATED. | |
33 | + | AN ACT concerning 1 | |
40 | 34 | ||
41 | - | (B) “AGGREGATE” MEANS TO CORRELATE , LINK, OR ASSOCIATE | |
42 | - | PERSONALLY IDENTIFIA BLE INFORMATION FROM ONE PROVIDER WITH | |
43 | - | PERSONALLY IDENTIFIA BLE INFORMATION FROM ANY OTHER PROVIDER INSID E | |
44 | - | THE BALTIMORE CITY YOUTH DATA HUB. | |
35 | + | Baltimore City Youth Data Hub – Establishment 2 | |
45 | 36 | ||
46 | - | (C) “AUTHORIZED PURPOSE ” MEANS AN EVIDENCE –BASED, TESTABLE | |
47 | - | INQUIRY THAT IS INTE NDED TO YIELD RESULT S THAT FURTHER THE P URPOSE OF | |
48 | - | THE BALTIMORE CITY YOUTH DATA HUB. Ch. 169 2022 LAWS OF MARYLAND | |
37 | + | FOR the purpose of establishing the Baltimore City Youth Data Hub for the purpose of 3 | |
38 | + | promoting well–being of youth and improving access to and cost–efficiency of youth 4 | |
39 | + | programs; establishing an executive committee and providing for a manager to 5 | |
40 | + | operate the Baltimore City Youth Data Hub; providing that certain activities of the 6 | |
41 | + | executive committee and manager are not subject to the Open Meetings Act or the 7 | |
42 | + | Public Information Act; authorizing certain entities to provide data to the Baltimore 8 | |
43 | + | City Youth Data Hub; providing for the authorized uses and ownership of the data 9 | |
44 | + | provided to the Baltimore City Youth Data Hub; establishing certain penalties and 10 | |
45 | + | immunity under certain circumstances; and generally relating to the Baltimore City 11 | |
46 | + | Youth Data Hub. 12 | |
49 | 47 | ||
50 | - | – 2 – | |
48 | + | BY adding to 13 | |
49 | + | Article – Local Government 14 2 HOUSE BILL 1276 | |
51 | 50 | ||
52 | - | (D) “BALTIMORE CITY YOUTH DATA HUB” MEANS AN INTEGRATED , | |
53 | - | ELECTRONIC DATA MANA GEMENT SYSTEM THAT L INKS DATA ABOUT YOUT H FROM | |
54 | - | ANY PROVIDER . | |
55 | 51 | ||
56 | - | (E) (1) “DATA” MEANS ANY INFORMATIO N ABOUT A YOUTH . | |
52 | + | Section 31–101 through 31–110 to be under the new title “Title 31. Baltimore City 1 | |
53 | + | Youth Data Hub” 2 | |
54 | + | Annotated Code of Maryland 3 | |
55 | + | (2013 Volume and 2021 Supplement) 4 | |
57 | 56 | ||
58 | - | (2) “DATA” INCLUDES NAMES , ADDRESSES, TELEPHONE NUMBERS , | |
59 | - | DATES OF BIRT H, INFORMATION ON GENDE R, ETHNICITY, AND ENGLISH LANGUAGE | |
60 | - | PROFICIENCY, FAMILY OR PERSONAL I NCOMES, OTHER FAMILY DATA , SOCIAL | |
61 | - | SECURITY NUMBERS , STUDENT OR EMPLOYEE IDENTIFICATION NUMBE RS, | |
62 | - | ENROLLMENT AND ATTEN DANCE DATES , PERFORMANCE INFORMAT ION IN ANY | |
63 | - | JOBS, INTERNSHIPS, SCHOOLS, OR OTHER PROGRAMS , CURRENT AND PAST HEA LTH | |
64 | - | INFORMATION , INCLUDING BIRTH WEIG HTS, MATERNAL HEALTH AT B IRTH, AND | |
65 | - | EXPOSURE TO LEAD , AND INFORMATION ON T HE RECEIPT INDIVIDUA LLY OR BY | |
66 | - | FAMILY OF WELFARE BE NEFITS. | |
57 | + | SECTION 1. BE IT ENACTED BY THE GENERAL ASSEMBLY OF MARYLAND, 5 | |
58 | + | That the Laws of Maryland read as follows: 6 | |
67 | 59 | ||
68 | - | (F) (1) “DATA RECIPIENT” MEANS ANY INDIVIDUAL , AGENCY, OR ENTITY | |
69 | - | THAT RECEIVES DE –IDENTIFIED DATA FROM THE BALTIMORE CITY YOUTH DATA | |
70 | - | HUB FOR ANALYSIS , RESEARCH, OR EVALUATION PURPOS ES. | |
60 | + | Article – Local Government 7 | |
71 | 61 | ||
72 | - | ||
62 | + | TITLE 31. BALTIMORE CITY YOUTH DATA HUB. 8 | |
73 | 63 | ||
74 | - | (G) “DE–IDENTIFIED DATA ” MEANS AN Y PERSONALLY IDENTIF IABLE | |
75 | - | INFORMATION THAT IS PERMANENTLY REMOVED IN A MANNER THAT LEA VES NO | |
76 | - | REASONABLE BASIS TO BELIEVE THAT THE REM AINING INFORMATION C AN BE USED | |
77 | - | TO SUCCESSFULLY LINK THE DE–IDENTIFIED DATA TO A PARTICULAR INDIVIDUA L. | |
64 | + | 31–101. 9 | |
78 | 65 | ||
79 | - | ( | |
80 | - | ||
66 | + | (A) IN THIS TITLE THE FOL LOWING WORDS HAVE TH E MEANINGS 10 | |
67 | + | INDICATED. 11 | |
81 | 68 | ||
82 | - | (I) “MANAGER” MEANS THE NONGOVERNM ENTAL CUSTODIAN OF T HE | |
83 | - | BALTIMORE CITY YOUTH DATA HUB RESPONSIBLE FOR I TS OPERATION , UPKEEP, | |
84 | - | AND SECURITY. | |
69 | + | (B) “AGGREGATE” MEANS TO CORRELATE , LINK, OR ASSOCIATE 12 | |
70 | + | PERSONALLY IDENTIFIA BLE INFORMATION FROM ONE PROVIDER WITH 13 | |
71 | + | PERSONALLY IDENTIFIA BLE INFORMATION FROM ANY OTHER PROVIDER I NSIDE 14 | |
72 | + | THE BALTIMORE CITY YOUTH DATA HUB. 15 | |
85 | 73 | ||
86 | - | (J) “PERSONALLY IDENTIFIAB LE INFORMATION ” MEANS INCLUDES: | |
74 | + | (C) “AUTHORIZED PURPOSE ” MEANS AN EVIDENCE –BASED, TESTABLE 16 | |
75 | + | INQUIRY THAT IS INTE NDED TO YIELD RESULTS THA T FURTHER THE PURPOS E OF 17 | |
76 | + | THE BALTIMORE CITY YOUTH DATA HUB. 18 | |
87 | 77 | ||
88 | - | (1) AN INDIVIDUAL’S NAME; | |
78 | + | (D) “BALTIMORE CITY YOUTH DATA HUB” MEANS AN INTEGRATED , 19 | |
79 | + | ELECTRONIC DATA MANA GEMENT SYSTEM THAT L INKS DATA ABOUT YOUT H FROM 20 | |
80 | + | ANY PROVIDER . 21 | |
89 | 81 | ||
90 | - | (2) THE NAME OF AN INDIV IDUAL’S PARENT OR OTHER FA MILY | |
91 | - | MEMBERS; | |
92 | - | LAWRENCE J. HOGAN, JR., Governor Ch. 169 | |
82 | + | (E) (1) “DATA” MEANS ANY INFORMA TION ABOUT A YOUTH . 22 | |
93 | 83 | ||
94 | - | – 3 – | |
95 | - | (3) THE ADDRESS OF AN IN DIVIDUAL OR AN INDIV IDUAL’S FAMILY | |
96 | - | MEMBERS; | |
84 | + | (2) “DATA” INCLUDES NAMES , ADDRESSES, TELEPHONE NUMBERS , 23 | |
85 | + | DATES OF BIRTH , INFORMATION ON GENDE R, ETHNICITY, AND ENGLISH LANGUAGE 24 | |
86 | + | PROFICIENCY, FAMILY OR PERSONAL I NCOMES, OTHER FAMILY DATA , SOCIAL 25 | |
87 | + | SECURITY NUMBERS , STUDENT OR EMPLOYEE IDENTIFICATION NUMBE RS, 26 | |
88 | + | ENROLLMENT AND ATTEN DANCE DATES , PERFORMANCE INFORMAT ION IN ANY 27 | |
89 | + | JOBS, INTERNSHIPS, SCHOOLS, OR OTHER PROGRAMS , CURRENT AND PAST HEA LTH 28 | |
90 | + | INFORMATION , INCLUDING BIRTH WEIG HTS, MATERNAL HEALTH AT B IRTH, AND 29 | |
91 | + | EXPOSURE TO LEAD , AND INFORMA TION ON THE RECEIPT INDIVIDUALLY OR BY 30 | |
92 | + | FAMILY OF WELFARE BE NEFITS. 31 | |
93 | + | HOUSE BILL 1276 3 | |
97 | 94 | ||
98 | - | (4) A PERSONAL IDENTIFIE R, INCLUDING AN INDIVID UAL’S SOCIAL | |
99 | - | SECURITY NUMBER , STUDENT IDENTIFICATI ON NUMBER, OR BIOMETRIC RECORD ; | |
100 | 95 | ||
101 | - | (5) AN INDIRECT IDENTIFI ER, INCLUDING AN INDIVID UAL’S DATE OF | |
102 | - | BIRTH, PLACE OF BIRTH , OR MOTHER’S MAIDEN NAME ; AND | |
96 | + | (F) (1) “DATA RECIPIENT” MEANS ANY INDIVIDUAL , AGENCY, OR ENTITY 1 | |
97 | + | THAT RECEIVES DE –IDENTIFIED DATA FROM THE BALTIMORE CITY YOUTH DATA 2 | |
98 | + | HUB FOR ANALYSIS , RESEARCH, OR EVALUATION PURPOS ES. 3 | |
103 | 99 | ||
104 | - | (6) ANY DATA THAT , EITHER ALONE OR IN COMBINATION , WOULD | |
105 | - | TEND TO ASSOCIATE OR LINK A PIECE OF INFO RMATION WITH A PARTI CULAR | |
106 | - | INDIVIDUAL IN A MANN ER THAT WOULD ALLOW A REASONABLE PERSON IN THE | |
107 | - | COMMUNITY TO IDENTIF Y THE PARTICULAR IND IVIDUAL. | |
100 | + | (2) “DATA RECIPIENT” INCLUDES THE MANAGER OR A PROVIDER. 4 | |
108 | 101 | ||
109 | - | (K) “PROVIDER” MEANS: | |
102 | + | (G) “DE–IDENTIFIED DATA ” MEANS ANY PERSONALLY IDENTIFIABLE 5 | |
103 | + | INFORMATION THAT IS PERMANENTLY REMOVED IN A MANNER THAT LEA VES NO 6 | |
104 | + | REASONABLE BASIS TO BELIEVE THAT THE REM AINING INFORMATION C AN BE USED 7 | |
105 | + | TO SUCCESSFULLY LINK THE DE–IDENTIFIED DATA TO A PARTICULAR INDIVIDUA L. 8 | |
110 | 106 | ||
111 | - | ( | |
112 | - | ||
107 | + | (H) “EXECUTIVE COMMITTEE ” MEANS THE BODY THAT PROVIDES VISION , 9 | |
108 | + | OVERSIGHT, AND LEADERSHIP FOR T HE BALTIMORE CITY YOUTH DATA HUB. 10 | |
113 | 109 | ||
114 | - | (2) THE CITY COUNCIL OF BALTIMORE CITY; BALTIMORE’S | |
115 | - | PROMISE; AND | |
110 | + | (I) “MANAGER” MEANS THE NONGOVERNM ENTAL CUSTODIAN O F THE 11 | |
111 | + | BALTIMORE CITY YOUTH DATA HUB RESPONSIBLE FOR I TS OPERATION , UPKEEP, 12 | |
112 | + | AND SECURITY. 13 | |
116 | 113 | ||
117 | - | ( | |
114 | + | (J) “PERSONALLY IDENTIFIAB LE INFORMATION ” MEANS INCLUDES: 14 | |
118 | 115 | ||
119 | - | (4) ANY OTHER PUBLIC , QUASI–PUBLIC, OR PRIVATE ENTITY TH AT | |
120 | - | CONTRIBUTES DATA TO THE BALTIMORE CITY YOUTH DATA HUB. | |
116 | + | (1) AN INDIVIDUAL’S NAME; 15 | |
121 | 117 | ||
122 | - | ( | |
123 | - | ||
118 | + | (2) THE NAME OF AN INDIV IDUAL’S PARENT OR OTHER FA MILY 16 | |
119 | + | MEMBERS; 17 | |
124 | 120 | ||
125 | - | (M) (L) “SECURE” MEANS TO IMPLEMENT A COMPREHENSIVE DATA | |
126 | - | SECURITY PROG RAM TO MAINTAIN DATA IN STRICT CONFIDENCE AND PROTECT | |
127 | - | PERSONALLY IDENTIFIA BLE INFORMATION AND DE–IDENTIFIED DATA | |
128 | - | AGGREGATED THROUGH T HE BALTIMORE CITY YOUTH DATA HUB FROM | |
129 | - | UNAUTHORIZED ACCESS , USE, MODIFICATION , OR DISCLOSURE . | |
121 | + | (3) THE ADDRESS OF AN INDIVI DUAL OR AN INDIVIDUA L’S FAMILY 18 | |
122 | + | MEMBERS; 19 | |
130 | 123 | ||
131 | - | (N) (M) “YOUTH” MEANS ANY P ERSON UNDER THE AGE OF 21 YEARS WHO: | |
124 | + | (4) A PERSONAL IDENTIFIE R, INCLUDING AN INDIVID UAL’S SOCIAL 20 | |
125 | + | SECURITY NUMBER , STUDENT IDENTIFICATI ON NUMBER, OR BIOMETRIC RECORD ; 21 | |
132 | 126 | ||
133 | - | (1) RESIDES IN BALTIMORE CITY; | |
127 | + | (5) AN INDIRECT IDENTIFI ER, INCLUDING AN INDIVID UAL’S DATE OF 22 | |
128 | + | BIRTH, PLACE OF BIRTH , OR MOTHER’S MAIDEN NAME ; AND 23 | |
134 | 129 | ||
135 | - | (2) ATTENDS OR GRADUATED FROM AN ELEMENTARY O R SECONDARY | |
136 | - | SCHOOL IN BALTIMORE CITY; OR | |
137 | - | Ch. 169 2022 LAWS OF MARYLAND | |
130 | + | (6) ANY DATA THAT , EITHER ALONE OR IN C OMBINATION, WOULD 24 | |
131 | + | TEND TO ASSOCIATE OR LINK A PIECE OF INFO RMATION WITH A PARTI CULAR 25 | |
132 | + | INDIVIDUAL IN A MANN ER THAT WOULD ALLOW A REASONABLE PERSON IN THE 26 | |
133 | + | COMMUNITY TO IDENTIFY THE PART ICULAR INDIVIDUAL . 27 | |
138 | 134 | ||
139 | - | – 4 – | |
140 | - | (3) PARTICIPATES IN OR G RADUATED FROM ANY YO UTH PROGRAM IN | |
141 | - | BALTIMORE CITY. | |
135 | + | (K) “PROVIDER” MEANS: 28 | |
142 | 136 | ||
143 | - | 31–102. | |
137 | + | (1) THE MAYOR OF BALTIMORE CITY OR A UNIT WITHIN THE OFFICE 29 | |
138 | + | OF THE MAYOR AND CITY COUNCIL OF BALTIMORE CITY; 30 | |
139 | + | 4 HOUSE BILL 1276 | |
144 | 140 | ||
145 | - | (A) THERE IS A BALTIMORE CITY YOUTH DATA HUB IN BALTIMORE CITY. | |
146 | 141 | ||
147 | - | (B) THE PURPOSE OF THE BALTIMORE CITY YOUTH DATA HUB IS: | |
142 | + | (2) THE CITY COUNCIL OF BALTIMORE CITY; BALTIMORE’S 1 | |
143 | + | PROMISE; AND 2 | |
148 | 144 | ||
149 | - | (1) TO PROMOTE THE HEALT H, SAFETY, SECURITY, AND WELL–BEING | |
150 | - | OF YOUTH; AND | |
145 | + | (3) THE BALTIMORE CITY BOARD OF SCHOOL COMMISSIONERS ; AND 3 | |
151 | 146 | ||
152 | - | ( | |
153 | - | ||
147 | + | (4) ANY OTHER PUBLIC , QUASI–PUBLIC, OR PRIVATE ENTITY TH AT 4 | |
148 | + | CONTRIBUTES DATA TO THE BALTIMORE CITY YOUTH DATA HUB. 5 | |
154 | 149 | ||
155 | - | 31–103. | |
150 | + | (L) “QUERY” MEANS TO SEARCH , FIND, AND ANALYZE DATA IN THE 6 | |
151 | + | BALTIMORE CITY YOUTH DATA HUB. 7 | |
156 | 152 | ||
157 | - | (A) THE EXECUTIVE COMMITT EE CONSISTS OF: | |
153 | + | (M) (L) “SECURE” MEANS TO IMPLEMENT A COMPREHENSIVE DATA 8 | |
154 | + | SECURITY PROGRAM TO MAINTAIN DATA IN STR ICT CONFIDENCE AND P ROTECT 9 | |
155 | + | PERSONALLY IDENTIFIA BLE INFORMATION AND DE–IDENTIFIED DATA 10 | |
156 | + | AGGREGATED THROUGH T HE BALTIMORE CITY YOUTH DATA HUB FROM 11 | |
157 | + | UNAUTHORI ZED ACCESS, USE, MODIFICATION , OR DISCLOSURE . 12 | |
158 | 158 | ||
159 | - | ( | |
159 | + | (N) (M) “YOUTH” MEANS ANY PERSON UND ER THE AGE OF 21 YEARS WHO: 13 | |
160 | 160 | ||
161 | - | (2) THE CHIEF EXECUTIVE OFFICER OF THE BALTIMORE CITY | |
162 | - | PUBLIC SCHOOL SYSTEM, OR THE CHIEF EXECUTIVE OFFICER’S DESIGNEE; AND | |
161 | + | (1) RESIDES IN BALTIMORE CITY; 14 | |
163 | 162 | ||
164 | - | ( | |
165 | - | ||
163 | + | (2) ATTENDS OR GRADUATED FROM AN ELEMENTARY O R SECONDARY 15 | |
164 | + | SCHOOL IN BALTIMORE CITY; OR 16 | |
166 | 165 | ||
167 | - | (B) THE EXECUTIVE COMMITT EE SHALL: | |
166 | + | (3) PARTICIPATES IN OR GRADUATED FROM ANY YOUTH PROGRAM IN 17 | |
167 | + | BALTIMORE CITY. 18 | |
168 | 168 | ||
169 | - | ||
169 | + | 31–102. 19 | |
170 | 170 | ||
171 | - | (2) APPOINT AND OVERSEE THE MANA GER OF THE BALTIMORE CITY | |
172 | - | YOUTH DATA HUB. | |
171 | + | (A) THERE IS A BALTIMORE CITY YOUTH DATA HUB IN BALTIMORE CITY. 20 | |
173 | 172 | ||
174 | - | (C) (1) THE EXECUTIVE COMMITT EE SHALL ESTABLISH A N ADVISORY | |
175 | - | COMMITTEE OF COMMUNI TY STAKEHOLDERS , INCLUDING REPRESENTA TIVES FROM | |
176 | - | NONPROFIT ORGANIZATI ONS, FAITH–BASED INSTITUTIONS , COMMUNITY RES IDENT | |
177 | - | ASSOCIATIONS, AND MEMBERS FROM THE LARGER COMMUNITY . | |
173 | + | (B) THE PURPOSE OF THE BALTIMORE CITY YOUTH DATA HUB IS: 21 | |
178 | 174 | ||
179 | - | (2) THE PURPOSE OF THE AD VISORY COMMITTEE IS TO INCREASE | |
180 | - | AWARENESS OF AND PRO VIDE FEEDBACK ON THE BALTIMORE CITY YOUTH DATA | |
181 | - | HUB. | |
175 | + | (1) TO PROMOTE THE HEALT H, SAFETY, SECURITY, AND WELL–BEING 22 | |
176 | + | OF YOUTH; AND 23 | |
182 | 177 | ||
183 | - | 31–104. LAWRENCE J. HOGAN, JR., Governor Ch. 169 | |
178 | + | (2) TO IMPROVE EQUITABLE ACCESS TO AND THE OV ERALL 24 | |
179 | + | COST–EFFICIENCY OF PROGRA MS SERVING YOUTH . 25 | |
184 | 180 | ||
185 | - | – | |
181 | + | 31–103. 26 | |
186 | 182 | ||
187 | - | (A) (1) THE BALTIMORE CITY YOUTH DATA HUB AND ANY | |
188 | - | DE–IDENTIFIED AGGREGATE D DATA ARE NOT PUBLI C OR GOVERNMENT RECO RDS | |
189 | - | AND ARE NOT SUBJECT TO THE PUBLIC INFORMATION ACT. | |
183 | + | (A) THE EXECUTIVE COMMITT EE CONSISTS OF: 27 | |
190 | 184 | ||
191 | - | (2) THE PARTICIPATION OF THE MAYOR OF BALTIMORE CITY, THE | |
192 | - | CHIEF EXECUTIVE OFFICER OF THE BALTIMORE CITY PUBLIC SCHOOL SYSTEM, | |
193 | - | OR THEIR DE SIGNEES IN THE EXECU TIVE COMMITTEE DOES NOT SUBJECT THE | |
194 | - | BALTIMORE CITY YOUTH DATA HUB TO THE PUBLIC INFORMATION ACT OR THE | |
195 | - | OPEN MEETINGS ACT. | |
185 | + | (1) THE MAYOR OF BALTIMORE CITY, OR THE MAYOR’S DESIGNEE; 28 HOUSE BILL 1276 5 | |
196 | 186 | ||
197 | - | (B) (A) (1) THE MANAGER SHALL OPE RATE THE BALTIMORE CITY | |
198 | - | YOUTH DATA HUB. | |
199 | 187 | ||
200 | - | (2) (B) THE MANAGER SHALL BE A CITY–WIDE ENTITY THAT AIM S | |
201 | - | TO IMPROVE OUTCOMES FOR YOUTH, WITH A SPECIFIC FOCU S ON YOUTH FROM | |
202 | - | HISTORICALLY MARGINA LIZED COMMUNITIES . | |
203 | 188 | ||
204 | - | (3) (C) THE MANAGER SHALL AGG REGATE PROMPTLY AND | |
205 | - | PROPERLY PERSONALLY IDENTIFIABLE INFORMA TION RECEIVED FROM | |
206 | - | PROVIDERS. | |
189 | + | (2) THE CHIEF EXECUTIVE OFFICER OF THE BALTIMORE CITY 1 | |
190 | + | PUBLIC SCHOOL SYSTEM, OR THE CHIEF EXECUTIVE OFFICER’S DESIGNEE; AND 2 | |
207 | 191 | ||
208 | - | (4) (D) (I) (1) SUBJECT TO SUBPARAGRAPH (II) OF THIS | |
209 | - | PARAGRAPH PARAGRAPH (2) OF THIS SUBSECTION , THE MANAGER MAY CONT RACT | |
210 | - | WITH A TECHNOLOGY VE NDOR OR OTHER PROFES SIONAL. | |
192 | + | (3) REPRESENTATIVES FROM OTHER PROVIDERS ANY OTHER 3 | |
193 | + | INDIVIDUALS JOINTLY SELECTED BY THE MAYOR AND THE CHIEF EXECUTIVE. 4 | |
211 | 194 | ||
212 | - | (II) (2) IF THE MANAGER CONTRA CTS WITH A TECHNOLOG Y | |
213 | - | VENDOR OR OTHER PROFESSIONAL TO CODE , CREATE, OR ASSIST WITH THE | |
214 | - | OPERATION OF THE BALTIMORE CITY YOUTH DATA HUB, THE TECHNOLOGY | |
215 | - | VENDOR OR PROFESSION AL IS SUBJECT TO THE REQUIREMENTS OF THIS TITLE | |
216 | - | RELATED TO THE MANAG ER. | |
195 | + | (B) THE EXECUTIVE COMMITT EE SHALL: 5 | |
217 | 196 | ||
218 | - | (5) (E) (I) (1) THE MANAGER IS NOT SU BJECT TO THE PUBLIC | |
219 | - | INFORMATION ACT OR THE OPEN MEETINGS ACT. | |
197 | + | (1) OVERSEE THE BALTIMORE CITY YOUTH DATA HUB; AND 6 | |
220 | 198 | ||
221 | - | ||
222 | - | ||
199 | + | (2) APPOINT AND OVERSEE THE MANAGER OF THE BALTIMORE CITY 7 | |
200 | + | YOUTH DATA HUB. 8 | |
223 | 201 | ||
224 | - | 31–105. | |
202 | + | (C) (1) THE EXECUTIVE COMMITT EE SHALL ESTABLISH A N ADVISORY 9 | |
203 | + | COMMITTEE OF COMMUNI TY STAKEHOLDERS , INCLUDING REPRESENTA TIVES FROM 10 | |
204 | + | NONPROFIT ORGANIZATI ONS, FAITH–BASED INSTITUTIONS , COMMUNITY RESIDENT 11 | |
205 | + | ASSOCIATIONS, AND MEMBERS FROM THE LARGER COMMUNITY . 12 | |
225 | 206 | ||
226 | - | (A) NOTWITHSTANDING ANY O THER PROVISION OF LA W, ANY LOCAL | |
227 | - | GOVERNMENTAL ENTITY AND THE BALTIMORE CITY BOARD OF SCHOOL | |
228 | - | COMMISSIONERS MAY PRO VIDE PERSONALLY IDEN TIFIABLE INFORMATION AND | |
229 | - | DATA FOR THE BALTIMORE CITY YOUTH DATA HUB. Ch. 169 2022 LAWS OF MARYLAND | |
207 | + | (2) THE PURPOSE OF THE ADVISO RY COMMITTEE IS TO I NCREASE 13 | |
208 | + | AWARENESS OF AND PRO VIDE FEEDBACK ON THE BALTIMORE CITY YOUTH DATA 14 | |
209 | + | HUB. 15 | |
230 | 210 | ||
231 | - | – | |
211 | + | 31–104. 16 | |
232 | 212 | ||
233 | - | (B) NOTWITHSTANDING ANY O THER PROVISION OF LA W, ANY STATE OR | |
234 | - | LOCAL GOVERNMENTAL E NTITY OR PRIVATE OR QUASI–GOVERNMENTAL ENTITY | |
235 | - | MAY PROVIDE PERSONAL LY IDENTIFIABLE INFO RMATION AND DATA FOR THE | |
236 | - | BALTIMORE CITY YOUTH DATA HUB. | |
213 | + | (A) (1) THE BALTIMORE CITY YOUTH DATA HUB AND ANY 17 | |
214 | + | DE–IDENTIFIED AGGREGATE D DATA ARE NOT PUBLI C OR GOVERNMENT RECO RDS 18 | |
215 | + | AND ARE NOT SUBJECT TO THE PUBLIC INFORMATION ACT. 19 | |
237 | 216 | ||
238 | - | (B) A ON REQUEST OF THE MAN AGER, A PROVIDER MAY SUBMIT AND | |
239 | - | UPDATE PERSONALLY ID ENTIFIABLE INFORMATI ON AND OTHER DATA RELATED TO | |
240 | - | THE BALTIMORE CITY YOUTH DATA HUB’S PURPOSE ON A ROLLING OR REAL –TIME | |
241 | - | BASIS. | |
217 | + | (2) THE PARTICIPATION OF THE MAYOR OF BALTIMORE CITY, THE 20 | |
218 | + | CHIEF EXECUTIVE OFFICER OF THE BALTIMORE CITY PUBLIC SCHOOL SYSTEM, 21 | |
219 | + | OR THEIR DESIGNEES I N THE EXECUTIVE COMM ITTEE DOES NOT SUBJE CT THE 22 | |
220 | + | BALTIMORE CITY YOUTH DATA HUB TO THE PUBLIC INFORMATION ACT OR THE 23 | |
221 | + | OPEN MEETINGS ACT. 24 | |
242 | 222 | ||
243 | - | ||
244 | - | ||
223 | + | (B) (A) (1) THE MANAGER SHALL OPE RATE THE BALTIMORE CITY 25 | |
224 | + | YOUTH DATA HUB. 26 | |
245 | 225 | ||
246 | - | (1) THE DATA PROVIDED BY THE PROVIDER ; AND | |
226 | + | (2) (B) THE MANAGER SHALL BE A CITY–WIDE ENTITY THAT AIM S 27 | |
227 | + | TO IMPROVE OUTCOMES FOR YOUTH, WITH A SPECIFIC F OCUS ON YOUTH FROM 28 | |
228 | + | HISTORICALLY MARGINA LIZED COMMUNITIES . 29 | |
229 | + | 6 HOUSE BILL 1276 | |
247 | 230 | ||
248 | - | (2) THE DE–IDENTIFIED DATA AND ANY NEW DATA ELEMENT , | |
249 | - | INCLUDING DERIVATIVE FILES GENERATED AS A RESULT OF THE DATA P ROVIDED | |
250 | - | BY THE PROVIDER TO T HE BALTIMORE CITY YOUTH DATA HUB. | |
251 | 231 | ||
252 | - | 31–106. | |
232 | + | (3) (C) THE MANAGER SHALL AGG REGATE PROMPTLY AND 1 | |
233 | + | PROPERLY PERSONALLY IDENTIFIABLE INFORMA TION RECEIVED FROM 2 | |
234 | + | PROVIDERS. 3 | |
253 | 235 | ||
254 | - | ( | |
255 | - | ||
256 | - | ||
236 | + | (4) (D) (I) (1) SUBJECT TO SUBPARAGRAPH (II) OF THIS 4 | |
237 | + | PARAGRAPH PARAGRAPH (2) OF THIS SUBSECTION , THE MANAGER MAY CONT RACT 5 | |
238 | + | WITH A TECHNOLOGY VE NDOR OR OTHER PROFES SIONAL. 6 | |
257 | 239 | ||
258 | - | (B) DIRECT ACCESS TO PERS ONALLY IDENTIFIABLE INFORMATION IN THE | |
259 | - | BALTIMORE CITY YOUTH DATA HUB SHALL BE RESTRICT ED TO THE MAN AGER AND | |
260 | - | THE MANAGER ’S AUTHORIZED STAFF O R CONTRACTORS ONLY F OR AUTHORIZED | |
261 | - | PURPOSES AND LAWFUL QUALITY CONTROL . | |
240 | + | (II) (2) IF THE MANAGER CONTRA CTS WITH A TECHNOLOG Y 7 | |
241 | + | VENDOR OR OTHER PROFESSIONAL TO CODE , CREATE, OR ASSIST WITH THE 8 | |
242 | + | OPERATION OF THE BALTIMORE CITY YOUTH DATA HUB, THE TECHNOLOGY 9 | |
243 | + | VENDOR OR PROFESSION AL IS SUBJECT TO THE REQUIREMENTS OF THIS TITLE 10 | |
244 | + | RELATED TO THE MANAG ER. 11 | |
262 | 245 | ||
263 | - | (C) ON THE RECEIPT OF DAT A, THE MANAGER OR ITS D ESIGNATED | |
264 | - | TECHNOLOGY VENDOR SH ALL WORK WITH PROVID ERS TO PROMPTLY EXTR ACT AND | |
265 | - | UPLOAD THE DATA INTO THE BALTIMORE CITY YOUTH DATA HUB’S DATA | |
266 | - | MANAGEMENT SYSTEM FO R AGGREGATION AND DE –IDENTIFICATION . | |
246 | + | (5) (E) (I) (1) THE MANAGER IS NOT SU BJECT TO THE PUBLIC 12 | |
247 | + | INFORMATION ACT OR THE OPEN MEETINGS ACT. 13 | |
267 | 248 | ||
268 | - | (D) IMMEDIATELY AFTER AGG REGATING PERSONALLY IDENTIFIABLE | |
269 | - | INFORMATION IN THE D ATA MANAGEMENT SYSTE M, THE MANAGER SHALL DE STROY | |
270 | - | ANY COPIES OF THE PE RSONALLY IDENTIFIABLE IN FORMATION EXISTING O UTSIDE | |
271 | - | THE DATA MANAGEMENT SYSTEM IN A MANNER S UCH THAT, AFTER AGGREGATION , | |
272 | - | THE MANAGER DOES NOT POSSESS OR RETAIN AN Y PERSONALLY IDENTIF IABLE | |
273 | - | INFORMATION OUTSIDE THE DATA MANAGEMENT SYSTEM. | |
274 | - | LAWRENCE J. HOGAN, JR., Governor Ch. 169 | |
249 | + | (II) (2) THE RECORDS FOR WHICH THE MANAGER IS A 14 | |
250 | + | CUSTODIAN ARE NOT SU BJECT TO THE PUBLIC INFORMATION ACT. 15 | |
275 | 251 | ||
276 | - | – 7 – | |
277 | - | (E) THE BALTIMORE CITY YOUTH DATA HUB MAY NOT USE ITS D ATA | |
278 | - | MANAGEMENT SYSTEM FO R QUERIES TO PRODUCE ANY PERSONALLY IDENT IFIABLE | |
279 | - | INFORMATION OR REPOR TS THAT CONTAIN ANY PERSONALLY IDENTIFIA BLE | |
280 | - | INFORMATION . | |
252 | + | 31–105. 16 | |
281 | 253 | ||
282 | - | 31–107. | |
254 | + | (A) NOTWITHSTANDING ANY O THER PROVISION OF LA W, ANY LOCAL 17 | |
255 | + | GOVERNMENTAL ENTITY AND THE BALTIMORE CITY BOARD OF SCHOOL 18 | |
256 | + | COMMISSIONERS MAY PRO VIDE PERSONALLY IDEN TIFIABLE INFORMATION AND 19 | |
257 | + | DATA FOR THE BALTIMORE CITY YOUTH DATA HUB. 20 | |
283 | 258 | ||
284 | - | (A) (1) THE MANAGER SHALL PRO MPTLY REVIEW ANY QUE RY | |
285 | - | REQUESTED B Y A PROVIDER. | |
259 | + | (B) NOTWITHSTANDING ANY O THER PROVISION OF LA W, ANY STATE OR 21 | |
260 | + | LOCAL GOVERNMENTAL E NTITY OR PRIVATE OR QUASI–GOVERNMENTAL ENTITY 22 | |
261 | + | MAY PROVIDE PERSONAL LY IDENTIFIABLE INFO RMATION AND DATA FOR THE 23 | |
262 | + | BALTIMORE CITY YOUTH DATA HUB. 24 | |
286 | 263 | ||
287 | - | (2) THE MANAGER MAY RUN Q UERIES FOR INDIVIDUA LS OR ENTITIES | |
288 | - | THAT ARE NOT PROVIDE RS. | |
264 | + | (B) A ON REQUEST OF THE MAN AGER, A PROVIDER MAY SUBMIT AND 25 | |
265 | + | UPDATE PERSONALLY ID ENTIFIABLE INFORMATI ON AND OTHER DATA RELATED TO 26 | |
266 | + | THE BALTIMORE CITY YOUTH DATA HUB’S PURPOSE ON A ROLLING OR REAL –TIME 27 | |
267 | + | BASIS. 28 | |
289 | 268 | ||
290 | - | (B) BEFORE APPROVING A QU ERY, THE MANAGER , WITH ASSISTANCE FROM | |
291 | - | TECHNICAL EXPERTS ID ENTIFIED BY THE EXEC UTIVE COMMITTEE , SHALL CONDUCT | |
292 | - | AN IN–DEPTH REVIEW OF THE PROPOSED QUER Y FOR CONSISTENCY WI TH | |
293 | - | AUTHORIZED PURPOSES , ALIGNMENT WITH EVIDE NCE–BASED STANDARDS FOR | |
294 | - | EQUITABLE, ETHICAL, AND METHODOLOGICALLY APPROPRIATE INQUIRIE S, AND | |
295 | - | ASSESSMENT OF THE BE NEFITS FOR AND IMPAC T ON THE GREATER BALTIMORE | |
296 | - | CITY COMMUNI TY. | |
269 | + | (C) (B) (C) EACH PROVIDER AND ITS CLIENTS, STUDENTS, OR PARTICIPANTS , 29 | |
270 | + | AS APPROPRIATE , SHALL RETAIN OWNERSH IP OF: 30 | |
297 | 271 | ||
298 | - | (C) BEFORE PROVIDING ANY DATA IN RESPONSE TO A QUERY, THE | |
299 | - | MANAGER SHALL OBTAIN WRITTEN APPROVAL FRO M ANY PROVIDER OF DA TA TO | |
300 | - | CONFIRM THAT THERE I S NO REASONABLE BASI S TO BELIEVE THAT DE –IDENTIFIED | |
301 | - | DATA PROVIDED IN RES PONSE TO A QUERY COU LD BE USED BY A DATA RECIPIENT | |
302 | - | TO SUCCESSFULLY LINK DE–IDENTIFIED DATA TO A PARTICULAR INDIVIDUA L, | |
303 | - | BASED ON THE SIZE OR UNIQUENESS OF THE PO PULATION UNDER CONSI DERATION | |
304 | - | IN THE QUERY, OR OTHERWISE . | |
272 | + | (1) THE DATA PROVIDED BY THE PROVIDER ; AND 31 | |
273 | + | HOUSE BILL 1276 7 | |
305 | 274 | ||
306 | - | (D) THE MANAGER SHALL ENS URE THAT THE DATA MA NAGEMENT SYSTEM | |
307 | - | AND PROVIDED DATA ARE SECURE USING SECURITY STAND ARDS AND PROTOCOLS | |
308 | - | THAT ADDRESS , AT A MINIMUM, DATA SECURITY AND AC CESS, SECURITY INCIDENT | |
309 | - | AND DISASTER RECOVER Y PROCEDURES , AND RECORDING AND MO NITORING OF | |
310 | - | SYSTEM ACTIVITY . | |
311 | 275 | ||
312 | - | (E) THE MANAGER SHALL MAI NTAIN APPROPRIA TE ADMINISTRATIVE , | |
313 | - | PHYSICAL, AND TECHNICAL SAFEGU ARDS THAT PROTECT PR IVACY, | |
314 | - | CONFIDENTIALITY , INTEGRITY, AND AVAILABILITY OF ANY DATA IN COMPLIAN CE | |
315 | - | WITH THE FEDERAL FAMILY EDUCATIONAL RIGHTS AND PRIVACY ACT AND OTHER | |
316 | - | RELEVANT PRIVACY LAW S AND POLICIES, INCLUDING: | |
276 | + | (2) THE DE–IDENTIFIED DATA AND ANY NEW DATA ELEMENT , 1 | |
277 | + | INCLUDING DERIVATIVE FILES GENERATED AS A RESULT OF THE DATA P ROVIDED 2 | |
278 | + | BY THE PROVIDER TO T HE BALTIMORE CITY YOUTH DATA HUB. 3 | |
317 | 279 | ||
318 | - | (1) THE REQUIRED USE OF DE–IDENTIFIED DATA IN D ATA RESEARCH | |
319 | - | AND REPORTING ; | |
320 | - | Ch. 169 2022 LAWS OF MARYLAND | |
280 | + | 31–106. 4 | |
321 | 281 | ||
322 | - | ||
323 | - | ||
324 | - | ||
282 | + | (A) THE BALTIMORE CITY YOUTH DATA HUB AND MANAGER MAY U SE ONLY 5 | |
283 | + | AGGREGATED , DE–IDENTIFIED DATA FOR CONDUCTING ANY ANALY SIS, RESEARCH, 6 | |
284 | + | AND REPORTING TO THE EXECUTIVE COMMITTEE , THE PUBLIC, OR OTHERWISE . 7 | |
325 | 285 | ||
326 | - | (3) PROVIDING DATA SECUR ITY, INCLUDING THE CAPACI TY FOR | |
327 | - | AUDIT TRAILS; | |
286 | + | (B) DIRECT ACCESS TO PERS ONALLY IDENTIFIABLE INFORMATION IN THE 8 | |
287 | + | BALTIMORE CITY YOUTH DATA HUB SHALL BE RESTRICT ED TO THE MANAGER AND 9 | |
288 | + | THE MANAGER ’S AUTHORIZED STAFF O R CONTRACTORS ONLY F OR AUTHORIZED 10 | |
289 | + | PURPOSES AND LAWFUL QUALITY CONTROL . 11 | |
328 | 290 | ||
329 | - | (4) PROVIDING FOR THE PE RFORMANCE OF REGULAR AUDITS FOR | |
330 | - | COMPLIANCE WITH DATA PRIVACY AND SECURITY STANDARDS; AND | |
291 | + | (C) ON THE RECEIPT OF DAT A, THE MANAGER OR ITS D ESIGNATED 12 | |
292 | + | TECHNOLOGY VENDOR SH ALL WORK WITH PROVID ERS TO PROMPTLY EXTR ACT AND 13 | |
293 | + | UPLOAD T HE DATA INTO THE BALTIMORE CITY YOUTH DATA HUB’S DATA 14 | |
294 | + | MANAGEMENT SYSTEM FO R AGGREGATION AND DE –IDENTIFICATION . 15 | |
331 | 295 | ||
332 | - | (5) IMPLEMENTING GUIDELI NES AND POLICIES THA T PREVENT THE | |
333 | - | REPORTING OF OTHER P OTENTIALLY PERSONALL Y IDENTIFIABLE INFOR MATION. | |
296 | + | (D) IMMEDIATELY AFTER AGG REGATING PERSONALLY IDENTIFIABLE 16 | |
297 | + | INFORMATION IN THE D ATA MANAGEMENT SYSTE M, THE MANAGER SHALL DE STROY 17 | |
298 | + | ANY COPIES OF TH E PERSONALLY IDENTIF IABLE INFORMATION EX ISTING OUTSIDE 18 | |
299 | + | THE DATA MANAGEMENT SYSTEM IN A MANNER S UCH THAT, AFTER AGGREGATION , 19 | |
300 | + | THE MANAGER DOES NOT POSSESS OR RETAIN AN Y PERSONALLY IDENTIF IABLE 20 | |
301 | + | INFORMATION OUTSIDE THE DATA MANAGEMENT SYSTEM. 21 | |
334 | 302 | ||
335 | - | (F) THE MANAGER SHALL ENSURE THAT A QUERY OF THE DATA | |
336 | - | MANAGEMENT SYSTEM : | |
303 | + | (E) THE BALTIMORE CITY YOUTH DATA HUB MAY NOT USE ITS D ATA 22 | |
304 | + | MANAGEMENT SYSTEM FO R QUERIES TO PRODUCE ANY PERSONALLY IDENT IFIABLE 23 | |
305 | + | INFORMATION OR REPOR TS THAT CONTAIN ANY PERSONALLY IDENTIFIA BLE 24 | |
306 | + | INFORMATION . 25 | |
337 | 307 | ||
338 | - | (1) RESULTS IN DISCLOSUR E OF ONLY AGGREGATED DE–IDENTIFIED | |
339 | - | DATA OR AGGREGATED D E–IDENTIFIED DATA REPO RTS TO A DATA RECIPI ENT; AND | |
308 | + | 31–107. 26 | |
340 | 309 | ||
341 | - | ( | |
342 | - | A | |
310 | + | (A) (1) THE MANAGER SHALL PRO MPTLY REVIEW ANY QUE RY 27 | |
311 | + | REQUESTED BY A PROVI DER. 28 | |
343 | 312 | ||
344 | - | (G) ON REQUEST, THE MANAGER MAY PROV IDE TECHNICAL ASSIST ANCE TO | |
345 | - | DATA RECIPIENTS REGA RDING DATA RECEIVED FROM THE BALTIMORE CITY YOUTH | |
346 | - | DATA HUB. | |
313 | + | (2) THE MANAGER MAY RUN Q UERIES FOR INDIVIDUA LS OR ENTITIES 29 | |
314 | + | THAT ARE NOT PROVIDE RS. 30 | |
347 | 315 | ||
348 | - | (H) (1) THE MANAGER AND ANY D ATA RECIPIENTS MAY N OT: | |
316 | + | (B) BEFORE APPROVING A QU ERY, THE MANAGER , WITH ASSISTANCE FROM 31 | |
317 | + | TECHNICAL EXPERTS ID ENTIFIED BY THE EXEC UTIVE COMMITTEE , SHALL CONDUCT 32 | |
318 | + | AN IN–DEPTH REVIEW OF THE P ROPOSED QUERY FOR CO NSISTENCY WITH 33 | |
319 | + | AUTHORIZED PURPOSES , ALIGNMENT WITH EVIDE NCE–BASED STANDARDS FOR 34 8 HOUSE BILL 1276 | |
349 | 320 | ||
350 | - | (I) ATTEMPT TO RE –IDENTIFY DE–IDENTIFIED DATA; OR | |
351 | 321 | ||
352 | - | (II) DISCLOSE, RELEASE, OR REPORT DATA IN AN Y FORM THAT | |
353 | - | MAY RESULT IN THE RE –IDENTIFICATION OF DE –IDENTIFIED DATA . | |
322 | + | EQUITABLE, ETHICAL, AND METHODOLOGICALLY APPROPRIATE INQUIRIE S, AND 1 | |
323 | + | ASSESSMENT OF THE BE NEFITS FOR AND IMPAC T ON THE GREATER BALTIMORE 2 | |
324 | + | CITY COMMUNITY . 3 | |
354 | 325 | ||
355 | - | (2) THIS SUBSECTION MAY N OT BE CONSTRUED TO I NTERFERE WITH | |
356 | - | A DATA RECIPIENT ’S CONTINUED USE OF O R RELIANCE ON PERSON ALLY | |
357 | - | IDENTIFIABLE INFORMA TION PROVIDED TO THE BALTIMORE CITY YOUTH DATA | |
358 | - | HUB. | |
326 | + | (C) BEFORE PROVIDING ANY DATA IN RESPONSE TO A QUERY, THE 4 | |
327 | + | MANAGER SHALL OBTAIN WRITTEN APPROVAL FRO M ANY PROVIDER OF DA TA TO 5 | |
328 | + | CONFIRM THAT THERE I S NO REASONABLE BASI S TO BELIEVE THAT DE –IDENTIFIED 6 | |
329 | + | DATA PROVIDED IN RES PONSE TO A QUERY COU LD BE USED BY A DATA RE CIPIENT 7 | |
330 | + | TO SUCCESSFULLY LINK DE–IDENTIFIED DATA TO A PARTICULAR INDIVIDUA L, 8 | |
331 | + | BASED ON THE SIZE OR UNIQUENESS OF THE PO PULATION UNDER CONSI DERATION 9 | |
332 | + | IN THE QUERY, OR OTHERWISE . 10 | |
359 | 333 | ||
360 | - | 31–108. | |
334 | + | (D) THE MANAGER SHALL ENS URE THAT THE DATA MA NAGEMENT SYSTE M 11 | |
335 | + | AND PROVIDED DATA AR E SECURE USING SECUR ITY STANDARDS AND PR OTOCOLS 12 | |
336 | + | THAT ADDRESS , AT A MINIMUM, DATA SECURITY AND AC CESS, SECURITY INCIDENT 13 | |
337 | + | AND DISASTER RECOVER Y PROCEDURES , AND RECORDING AND MO NITORING OF 14 | |
338 | + | SYSTEM ACTIVITY . 15 | |
361 | 339 | ||
362 | - | EACH YEAR, THE BALTIMORE CITY YOUTH DATA HUB SHALL PUBLISH A | |
363 | - | REPORT THAT IS AVAIL ABLE AND ACCESSIBLE TO THE PUBLIC ON : | |
340 | + | (E) THE MANAGER SHALL MAI NTAIN APPROPRIATE ADMINI STRATIVE, 16 | |
341 | + | PHYSICAL, AND TECHNICAL SAFEGU ARDS THAT PROTECT PR IVACY, 17 | |
342 | + | CONFIDENTIALITY , INTEGRITY, AND AVAILABILITY OF ANY DATA IN COMPLIAN CE 18 | |
343 | + | WITH THE FEDERAL FAMILY EDUCATIONAL RIGHTS AND PRIVACY ACT AND OTHER 19 | |
344 | + | RELEVANT PRIVACY LAW S AND POLICIES, INCLUDING: 20 | |
364 | 345 | ||
365 | - | (1) THE | |
366 | - | ||
346 | + | (1) THE REQUIRED USE OF DE–IDENTIFIED DATA IN D ATA RESEARCH 21 | |
347 | + | AND REPORTING ; 22 | |
367 | 348 | ||
368 | - | – 9 – | |
369 | - | THE BALTIMORE CITY YOUTH DATA HUB FROM EACH PROVIDE R DURING THE | |
370 | - | IMMEDIATELY PRECEDIN G 12 MONTHS; | |
349 | + | (2) THE REQUIRED DISPOSI TION OF DATA THAT IS NO LONGER 23 | |
350 | + | NEEDED; 24 | |
371 | 351 | ||
372 | - | ( | |
373 | - | ||
352 | + | (3) PROVIDING DATA SECUR ITY, INCLUDING THE CAPACI TY FOR 25 | |
353 | + | AUDIT TRAILS; 26 | |
374 | 354 | ||
375 | - | ( | |
376 | - | ||
355 | + | (4) PROVIDING FOR THE PERFORMANCE OF REGULAR AUDITS FO R 27 | |
356 | + | COMPLIANCE WITH DATA PRIVACY AND SECURITY STANDARDS; AND 28 | |
377 | 357 | ||
378 | - | ( | |
379 | - | ||
358 | + | (5) IMPLEMENTING GUIDELI NES AND POLICIES THA T PREVENT THE 29 | |
359 | + | REPORTING OF OTHER P OTENTIALLY PERSONALL Y IDENTIFIABLE INFOR MATION. 30 | |
380 | 360 | ||
381 | - | ( | |
382 | - | ||
361 | + | (F) THE MANAGER SHALL ENS URE THAT A QUERY OF THE DATA 31 | |
362 | + | MANAGEMENT SYSTEM : 32 | |
383 | 363 | ||
384 | - | 31–109. | |
364 | + | (1) RESULTS IN DISCLOSUR E OF ONLY AGGREGATED DE–IDENTIFIED 33 | |
365 | + | DATA OR AGGREGATED D E–IDENTIFIED DATA REPO RTS TO A DATA RECIPI ENT; AND 34 HOUSE BILL 1276 9 | |
385 | 366 | ||
386 | - | (A) A PERSON, WHETHER ACTING ON BE HALF OF THE MANAGER OR A | |
387 | - | PROVIDER, WHO OBTAINS , DISCLOSES, OR USES, OR ATTEMPTS TO OBTAI N, | |
388 | - | DISCLOSE, OR USE IDENTIFIABLE DATA FO R A PURPOSE OTHER TH AN AGGREGATION | |
389 | - | IN THE BALTIMORE CITY YOUTH DATA HUB IS GUILTY OF A MI SDEMEANOR AND ON | |
390 | - | CONVICTION IS SUBJEC T TO IMPRISONMENT NO T EXCEEDING 1 YEAR OR A FINE NOT | |
391 | - | EXCEEDING $1,000 OR BOTH. | |
392 | 367 | ||
393 | - | (B) A PERSON, WHETHER ACTING ON BEHALF OF THE MAN AGER OR A | |
394 | - | PROVIDER, IS CIVILLY LIABLE TO AN INDIVIDUAL FOR AC TUAL DAMAGES , | |
395 | - | INCLUDING ATTORNEY ’S FEES AND LITIGATIO N COSTS, THAT THE COURT | |
396 | - | CONSIDERS APPROPRIAT E IF THE COURT FINDS BY CLEAR AND CONVINC ING | |
397 | - | EVIDENCE THAT THE PE RSON COMMITT ED A VIOLATION OF AN Y PROVISION OF THIS | |
398 | - | TITLE THAT CAUSED AN Y DAMAGE TO THE INDI VIDUAL. | |
399 | 368 | ||
400 | - | 31–110. | |
369 | + | (2) DOES NOT REVEAL PERS ONALLY IDENTIFIABLE INFORMATION TO 1 | |
370 | + | A DATA RECIPIENT. 2 | |
401 | 371 | ||
402 | - | NOTWITHSTANDING ANY O THER PROVISION OF LA W, AND EXCEPT AS | |
403 | - | PROVIDED IN § 31–109 OF THIS TITLE, A PROVIDER MAY NOT B E CIVILLY OR | |
404 | - | CRIMINALLY LIABLE FO R PROVIDING IDENTIFIABLE DATA TO THE MANAGER FOR | |
405 | - | THE SOLE PURPOSE OF INCLUSION IN THE BALTIMORE CITY YOUTH DATA HUB. | |
372 | + | (G) ON REQUEST, THE MANAGER MAY PROV IDE TECHNICAL ASSIST ANCE TO 3 | |
373 | + | DATA RECIPIENTS REGA RDING DATA RECEIVED FROM THE BALTIMORE CITY YOUTH 4 | |
374 | + | DATA HUB. 5 | |
406 | 375 | ||
407 | - | SECTION 2. AND BE IT FURTHER ENACTED, That this Act shall take effect June | |
408 | - | 1, 2022. | |
376 | + | (H) (1) THE MANAGER AND ANY D ATA RECIPIENTS MAY N OT: 6 | |
409 | 377 | ||
410 | - | Approved by the Governor, April 21, 2022. | |
378 | + | (I) ATTEMPT TO RE –IDENTIFY DE–IDENTIFIED DATA; OR 7 | |
379 | + | ||
380 | + | (II) DISCLOSE, RELEASE, OR REPORT DATA IN AN Y FORM THAT 8 | |
381 | + | MAY RESULT IN THE RE –IDENTIFICATION OF DE –IDENTIFIED DATA . 9 | |
382 | + | ||
383 | + | (2) THIS SUBSECTION MAY N OT BE CONSTRUED TO I NTERFERE WITH 10 | |
384 | + | A DATA RECIPIENT ’S CONTINUED USE OF O R RELIANCE ON PERSON ALLY 11 | |
385 | + | IDENTIFIABLE INFORMAT ION PROVIDED TO THE BALTIMORE CITY YOUTH DATA 12 | |
386 | + | HUB. 13 | |
387 | + | ||
388 | + | 31–108. 14 | |
389 | + | ||
390 | + | EACH YEAR, THE BALTIMORE CITY YOUTH DATA HUB SHALL PUBLISH A 15 | |
391 | + | REPORT THAT IS AVAIL ABLE AND ACCESSIBLE TO THE PUBLIC ON : 16 | |
392 | + | ||
393 | + | (1) THE IMPLEMENTATION O F THE DATA MANAGEMEN T SYSTEM, 17 | |
394 | + | INCLUDING IDENTIFICA TION OF THE SOURCES AND TYPES OF DATA RE CEIVED BY 18 | |
395 | + | THE BALTIMORE CITY YOUTH DATA HUB FROM EACH PROVIDE R DURING THE 19 | |
396 | + | IMMEDIATELY PRECEDIN G 12 MONTHS; 20 | |
397 | + | ||
398 | + | (2) A DESCRIPTION OF EAC H APPROVED DISCLOSUR E OF DATA BY 21 | |
399 | + | THE BALTIMORE CITY YOUTH DATA HUB; 22 | |
400 | + | ||
401 | + | (3) A LIST OF PUBLICATIO NS AND OTHER REPORTS BASED ON THE 23 | |
402 | + | BALTIMORE CITY YOUTH DATA HUB DATA; 24 | |
403 | + | ||
404 | + | (4) RECOMMENDATIONS AND BEST PRACTICES FOR E NHANCEMENT 25 | |
405 | + | AND ALIGNMENT OF DAT A COLLECTION AND MAI NTENANCE BY PROVIDER S; AND 26 | |
406 | + | ||
407 | + | (5) ANY OTHER INFORMAT ION CONSIDERED APPRO PRIATE BY THE 27 | |
408 | + | EXECUTIVE COMMITTEE . 28 | |
409 | + | ||
410 | + | 31–109. 29 | |
411 | + | 10 HOUSE BILL 1276 | |
412 | + | ||
413 | + | ||
414 | + | (A) A PERSON, WHETHER ACTING ON BE HALF OF THE MANAGER OR A 1 | |
415 | + | PROVIDER, WHO OBTAINS , DISCLOSES, OR USES, OR ATTEMPTS TO OBTAI N, 2 | |
416 | + | DISCLOSE, OR USE IDENTIFIABLE DATA FOR A PURPOSE O THER THAN AGGREGATION 3 | |
417 | + | IN THE BALTIMORE CITY YOUTH DATA HUB IS GUILTY OF A MI SDEMEANOR AND ON 4 | |
418 | + | CONVICTION IS SUBJEC T TO IMPRISONMENT NO T EXCEEDING 1 YEAR OR A FINE NOT 5 | |
419 | + | EXCEEDING $1,000 OR BOTH. 6 | |
420 | + | ||
421 | + | (B) A PERSON, WHETHER ACTING ON BE HALF OF THE MANAGER OR A 7 | |
422 | + | PROVIDER, IS CIVILLY LIABLE TO AN INDIVIDUAL FOR ACTUA L DAMAGES , 8 | |
423 | + | INCLUDING ATTORNEY ’S FEES AND LITIGATIO N COSTS, THAT THE COURT 9 | |
424 | + | CONSIDERS APPROPRIAT E IF THE COURT FINDS BY CLEAR AND CONVINC ING 10 | |
425 | + | EVIDENCE THAT THE PE RSON COMMITTED A VIO LATION OF ANY PROVIS ION OF THIS 11 | |
426 | + | TITLE THAT CAUSED ANY DA MAGE TO THE INDIVIDU AL. 12 | |
427 | + | ||
428 | + | 31–110. 13 | |
429 | + | ||
430 | + | NOTWITHSTANDING ANY O THER PROVISION OF LA W, AND EXCEPT AS 14 | |
431 | + | PROVIDED IN § 31–109 OF THIS TITLE, A PROVIDER MAY NOT B E CIVILLY OR 15 | |
432 | + | CRIMINALLY LIABLE FO R PROVIDING IDENTIFI ABLE DATA TO THE MAN AGER FOR 16 | |
433 | + | THE SOLE PURPOSE OF INCLU SION IN THE BALTIMORE CITY YOUTH DATA HUB. 17 | |
434 | + | ||
435 | + | SECTION 2. AND BE IT FURTHER ENACTED, That this Act shall take effect June 18 | |
436 | + | 1, 2022. 19 | |
437 | + | ||
438 | + | ||
439 | + | ||
440 | + | ||
441 | + | Approved: | |
442 | + | ________________________________________________________________________________ | |
443 | + | Governor. | |
444 | + | ________________________________________________________________________________ | |
445 | + | Speaker of the House of Delegates. | |
446 | + | ________________________________________________________________________________ | |
447 | + | President of the Senate. |