; and (F) protocols for managing a breach, including breach notifications, in accordance with the standards of National Center for Education Statistics. (9) Data collection The Commissioner shall ensure that data collection, maintenance, and use under this subsection complies with section 552a of title 5, United States Code. (10) Definitions In this subsection: (A) Institution of higher education The term institution of higher education has the meaning given the term in section 102. (B) Minority-serving institution The term minority-serving institution means an institution of higher education listed in section 371(a). (C) Personally identifiable information The term personally identifiable information means personally identifiable information within the meaning of section 444 of the General Education Provisions Act. . 3. Repeal of prohibition on student data system Section 134 of the Higher Education Act of 1965 ( 20 U.S.C. 1015c ) is repealed. 4. Institutional requirements (a) In general Paragraph (17) of section 487(a) of the Higher Education Act of 1965 ( 20 U.S.C. 1094(a) ) is amended to read as follows: (17) The institution or the assigned agent of the institution will collect and submit data to the Commissioner for Education Statistics in accordance with section 132(l), the nonstudent related surveys within the Integrated Postsecondary Education Data System (IPEDS), or any other Federal institution of higher education data collection effort (as designated by the Secretary), in a timely manner and to the satisfaction of the Secretary. . (b) Effective date The amendment made by subsection (a) shall take effect on the date that is 4 years after the date of enactment of this Act. 5. Transition provisions The Secretary of Education and the Commissioner for Education Statistics shall take such steps as are necessary to ensure that the development and maintenance of the postsecondary student data system required under section 132(l) of the Higher Education Act of 1965, as added by section 2 of this Act, occurs in