institutions and program of study For purposes of publishing the information described in paragraphs (1) and (2), for any year for which the number of students is determined by the Secretary to be of insufficient size to maintain the privacy of student data, the Secretary shall— (i) aggregate up to 4 years of additional data for such program of study to obtain data for a sufficient number of students to maintain student privacy