Md. Code, Local Government § 31–101

(a) In this title the following words have the meanings indicated.

(b) “Aggregate” means to correlate, link, or associate personally identifiable

information from one provider with personally identifiable information from any

other provider inside the Baltimore City Youth Data Hub.

(c) “Authorized purpose” means an evidence–based, testable inquiry that is

intended to yield results that further the purpose of the Baltimore City Youth Data

Hub.

(d) “Baltimore City Youth Data Hub” means an integrated, electronic data

management system that links data about youth from any provider.

(e) (1) “Data” means any information about a youth.

(2) “Data” includes names, addresses, telephone numbers, dates of

birth, information on gender, ethnicity, and English language proficiency, family or

personal incomes, other family data, Social Security numbers, student or employee

identification numbers, enrollment and attendance dates, performance information

in any jobs, internships, schools, or other programs, current and past health

information, including birth weights, maternal health at birth, and exposure to lead,

and information on the receipt individually or by family of welfare benefits.

(f) (1) “Data recipient” means any individual, agency, or entity that

receives de–identified data from the Baltimore City Youth Data Hub for analysis,

research, or evaluation purposes.

(2) “Data recipient” includes the manager or a provider.

(g) “De–identified data” means any personally identifiable information that

is permanently removed in a manner that leaves no reasonable basis to believe that

the remaining information can be used to successfully link the de–identified data to

a particular individual.

(h) “Executive committee” means the body that provides vision, oversight,

and leadership for the Baltimore City Youth Data Hub.

(i) “Manager” means the nongovernmental custodian of the Baltimore City

Youth Data Hub responsible for its operation, upkeep, and security.

(j) “Personally identifiable information” includes:

(1) an individual’s name;

(2) the name of an individual’s parent or other family members;

(3) the address of an individual or an individual’s family members;

(4) a personal identifier, including an individual’s Social Security

number, student identification number, or biometric record;

(5) an indirect identifier, including an individual’s date of birth, place

of birth, or mother’s maiden name; and

(6) any data that, either alone or in combination, would tend to

associate or link a piece of information with a particular individual in a manner that

would allow a reasonable person in the community to identify the particular

individual.

(k) “Provider” means:

(1) the Mayor and City Council of Baltimore City;

(2) Baltimore’s Promise; and

(3) the Baltimore City Board of School Commissioners.

(l) “Secure” means to implement a comprehensive data security program to

maintain data in strict confidence and protect personally identifiable information and

de–identified data aggregated through the Baltimore City Youth Data Hub from

unauthorized access, use, modification, or disclosure.

(m) “Youth” means any person under the age of 21 years who:

(1) resides in Baltimore City;

(2) attends or graduated from an elementary or secondary school in

Baltimore City; or

(3) participates in or graduated from any youth program in

Baltimore City.