§31–101.

    (a)    In this title the following words have the meanings indicated.

    (b)    “Aggregate” means to correlate, link, or associate personally identifiable information from one provider with personally identifiable information from any other provider inside the Baltimore City Youth Data Hub.

    (c)    “Authorized purpose” means an evidence–based, testable inquiry that is intended to yield results that further the purpose of the Baltimore City Youth Data Hub.

    (d)    “Baltimore City Youth Data Hub” means an integrated, electronic data management system that links data about youth from any provider.

    (e)    (1)    “Data” means any information about a youth.

        (2)    “Data” includes names, addresses, telephone numbers, dates of birth, information on gender, ethnicity, and English language proficiency, family or personal incomes, other family data, Social Security numbers, student or employee identification numbers, enrollment and attendance dates, performance information in any jobs, internships, schools, or other programs, current and past health information, including birth weights, maternal health at birth, and exposure to lead, and information on the receipt individually or by family of welfare benefits.

    (f)    (1)    “Data recipient” means any individual, agency, or entity that receives de–identified data from the Baltimore City Youth Data Hub for analysis, research, or evaluation purposes.

        (2)    “Data recipient” includes the manager or a provider.

    (g)    “De–identified data” means any personally identifiable information that is permanently removed in a manner that leaves no reasonable basis to believe that the remaining information can be used to successfully link the de–identified data to a particular individual.

    (h)    “Executive committee” means the body that provides vision, oversight, and leadership for the Baltimore City Youth Data Hub.

    (i)    “Manager” means the nongovernmental custodian of the Baltimore City Youth Data Hub responsible for its operation, upkeep, and security.

    (j)    “Personally identifiable information” includes:

        (1)    an individual’s name;

        (2)    the name of an individual’s parent or other family members;

        (3)    the address of an individual or an individual’s family members;

        (4)    a personal identifier, including an individual’s Social Security number, student identification number, or biometric record;

        (5)    an indirect identifier, including an individual’s date of birth, place of birth, or mother’s maiden name; and

        (6)    any data that, either alone or in combination, would tend to associate or link a piece of information with a particular individual in a manner that would allow a reasonable person in the community to identify the particular individual.

    (k)    “Provider” means:

        (1)    the Mayor and City Council of Baltimore City;

        (2)    Baltimore’s Promise; and

        (3)    the Baltimore City Board of School Commissioners.

    (l)    “Secure” means to implement a comprehensive data security program to maintain data in strict confidence and protect personally identifiable information and de–identified data aggregated through the Baltimore City Youth Data Hub from unauthorized access, use, modification, or disclosure.

    (m)    “Youth” means any person under the age of 21 years who:

        (1)    resides in Baltimore City;

        (2)    attends or graduated from an elementary or secondary school in Baltimore City; or

        (3)    participates in or graduated from any youth program in Baltimore City.