(a) This subtitle does not apply to personally identifiable information that:
(1) is publicly available information that is lawfully made available to the general public from federal, State, or local government records;
(2) an individual has consented to have publicly disseminated or listed;
(3) except for a medical record that a person is prohibited from redisclosing under § 4–302(d) of the Health – General Article, is disclosed in accordance with the federal Health Insurance Portability and Accountability Act;
(4) is disclosed in accordance with the federal Family Educational Rights and Privacy Act;
(5) is clinical information; or
(6) is information related to sponsored research.
(b) Compliance with this subtitle does not authorize a public institution of higher education to fail to comply with any other requirements of State or federal law relating to the protection and privacy of personally identifiable information.