; (B) access controls; (C) requirements to ensure sufficient data security, quality, validity, and reliability; and (D) other protection in accordance with the most recent Federal standards developed by the National Institute of Standards and Technology. (9) Data collection The Commissioner shall ensure that data collection under this subsection complies with section 552a of title 5, United States Code. (10) Definitions In this subsection: (A) Institution of higher education The term institution of higher education has the meaning given the term in section 102. (B) Personally identifiable information The term personally identifiable information has the meaning given the term in section 444 of the General Education Provisions Act ( 20 U.S.C. 1232g ). (C) Postsecondary institution The term postsecondary institution includes an institution of higher education. . (b) Conforming amendments Section 487(d) is amended— (1) by striking paragraph (3); and (2) by redesignating paragraph (4) as paragraph (3). 3. Repeal of prohibition on student data system Section 134 of the Higher Education Act of 1965 ( 20 U.S.C. 1015c ) is repealed. 4. Institutional requirements Paragraph (17) of section 487(a) of the Higher Education Act of 1965 ( 20 U.S.C. 1094(a) ) is amended to read as follows: (17) The institution or the assigned agent of the institution will collect and submit data to the Commissioner for Education Statistics in accordance with section 132(l), the nonstudent related surveys within the Integrated Postsecondary Education Data System (IPEDS), or any other Federal postsecondary institution data collection effort (as designated by the Secretary), in a timely manner and to the satisfaction of the Secretary. . 5. Effective date