b. Trade secrets and proprietary, commercial, or financial information received from
a person that is interested in applying for or receiving financing, technical
assistance, or other forms of business assistance.
6. Unless made confidential under subsection 1 or made exempt under subsection 5:
a. Bids received by a public entity in response to an invitation for bids by the public
entity are exempt until all of the bids have been received and opened by the
public entity.
b. Proposals received by a public entity in response to a request for proposals are
exempt records until a notice of intent to award is issued.
c. Records included with any bid or proposal naming and generally describing the
entity submitting the proposal are open.
7. Unless made confidential under subsection 1, records received or distributed by the
state department of emergency services under chapter 37-17.1 and the state local
intelligence center from the federal government and any public or private agency or
entity for emergency or disaster prevention, protection, mitigation, response, and
recovery, or for cyber or physical threat are exempt. Records in the possession or
under the control of a public entity which relate to cybersecurity information or critical
infrastructure, the disclosure of which may expose or create vulnerability of critical
infrastructure systems; or the safeguarding of telecommunications, electric, water,
sanitary sewage, storm water drainage, energy, fuel supply, hazardous liquid, natural
gas, coal, or other critical infrastructure system, are exempt.
a. Upon receipt of a request for records under this subsection which originated in a
federal agency or entity and are in the possession of the state department of
emergency services, state local intelligence center, or other public entity, the
requester must be referred to the federal agency or entity from which the records
originated to submit an application under the applicable federal laws or rules.
b. For purposes of this section, "cybersecurity" means processes or capabilities that
protect and defend systems, communications, and information from exploitation
and unauthorized use or modification.
c. For purposes of this section, "critical infrastructure" has the same meaning as in
subdivision a of subsection 2 of section 44-04-24.
8. Unless made confidential under subsection 1, university research records are exempt.
"University research records" means data and records, other than a financial or
administrative record, produced or collected by or for faculty or staff of an institution
under the control of the state board of higher education in the conduct of or as a result
of study or research on an educational, commercial, scientific, artistic, technical, or
scholarly issue, regardless of whether the study or research was sponsored by the
institution alone, or in conjunction with a governmental or private entity, provided the
information has not been publicly released, published, or patented.
9. Personally identifiable study information is confidential. "Personally identifiable study
information" means information about an individual participating in a human research
study or project at an institution under the control of the state board of higher
education which requires prospective institutional review board review or a
determination of exemption, if the information can be used to distinguish or trace the
individual's identity, or is linked or linkable to the individual. Examples of personally
identifiable study information include name, maiden name, mother's maiden name,
alias, personal identification number, social security number, passport number, driver's
license number, taxpayer identification number, financial account or credit card
number, address, electronic mail address, photographic images, fingerprints,
handwriting, and other biometric data. Information about participants in human
subjects research which does not constitute personally identifiable study information
but is part of a human subjects research study or project at an institution under the
control of the state board of higher education requiring prospective institutional review
board review or a determination of exemption is a university research record under
subsection 8.
Page No. 10