(a) An institution of higher education shall conduct a data maturity assessment by November 15 of each even-numbered year, December 1 of the year in which the institution of higher education completes the assessment, or the 60th day after the institution of higher education completes the assessment, whichever comes first.
(b) An institution of higher education's data maturity assessment shall include at least the below elements:
  (1) Data Architecture;
  (2) Data Analytics;
  (3) Data Governance and Standardization;
  (4) Data Management and Methodology;
  (5) Data Program Management and Change Control;
  (6) Data Quality;
  (7) Data Security and Privacy;
  (8) Data Strategy and Roadmap;
  (9) Master Data Management; and
  (10) Metadata Management.
(c) Institutions of higher education may complete their data maturity assessment through a method identified by the department or by using their own tool that includes the elements required by subsection (b) of this section.
(d) The data maturity assessment completed pursuant to this subsection addresses the requirement to review an institution of higher education's data governance program found at Texas Government Code § 2054.515(a)(2).
(e) To comply with Texas Government Code § 2054.515(a), an institution of higher education must complete a data maturity assessment that is compliant with this section in addition to addressing all information security assessment requirements enumerated in 1 Texas Administrative Code Chapter 202.
(f) To the extent that the data maturity assessment is an element of the information security assessment required by Texas Government Code § 2054.515 and codified at 1 Texas Administrative Code Chapter 202, it is an information security standard to which a public junior college is subject pursuant to Texas Government Code § 2054.0075.

Source Note: The provisions of this §218.20 adopted to be effective November 16, 2023, 48 TexReg 6581