Law / United States / 
Maryland
Student records of degree-granting institutions approved by the Maryland Higher Education Commission: physical security, confidentiality and electronic-record security
COMAR Title 13B, Subtitle 02, Chapter 02, regulation .19E, and Chapter 01, regulation .18E
In force since .
A sensitive categories rule binding public and private bodies.
- Obligation class
- Security
- Audit expectation
- none
What it requires
- If you are an in-State institution that requires or seeks a certificate of approval from the Maryland Higher Education Commission to operate and grant formal awards in the State, other than a private institution exempt under a charter granted by the General Assembly, maintain student records in accordance with acceptable national standards regarding institutions of higher education (COMAR 13B.02.02.19E(1)).
- Ensure the physical security and confidentiality of student records, and store physical records in fire-proof cabinets (COMAR 13B.02.02.19E(2)).
- Have adequate security to prevent loss of records maintained in electronic systems, and a document security plan appropriate to your record-keeping system (COMAR 13B.02.02.19E(3) and (4)).
- If you are an out-of-State institution that requires or seeks a certificate of approval to operate in Maryland and grants formal awards within the State, meet the same student-record standards (COMAR 13B.02.01.18E).
These lines are LexLint's reading of the law's text.
Who enforces it
Settledness
- As of
What record it asks for
Logging duty
The institution must keep student records to national standards, secure them physically and electronically, and have a document security plan. The regulation sets no log content, retention period or recipient.
- Kind
- None
- As of
What this law does
The Maryland Higher Education Commission's requirements for in-State degree-granting institutions apply to all in-State institutions that require or seek a certificate of approval to operate, or continue to operate, and grant formal awards within the State.
Section 11-202(a)(1) of the Education Article bars an institution of postsecondary education from commencing or continuing to operate, do business or function without a certificate of approval from the Commission, except as section 11-202.1 provides. Private in-State institutions exempt under charters granted by the General Assembly are covered only by section D of the scope regulation and Regulations .05, .10, .11 and .12 of the chapter.
An in-State institution must ensure the physical security and confidentiality of student records and store physical records in fire-proof cabinets. It must also maintain student records in accordance with acceptable national standards regarding institutions of higher education, have adequate security to prevent loss of records maintained in electronic systems, and have a document security plan appropriate to its record-keeping system.
The same requirements apply to an out-of-State institution that requires or seeks a certificate of approval to operate in Maryland and grants formal awards within the State. Chapter 02 of Subtitle 02, which holds regulation .19, was revised effective .
When LexLint raises it
When your app profile says your app serves colleges and universities.
Back to the example · Lint your app
Page updated .