The State must have policies and procedures in effect to ensure that public agencies in the State comply with §§ 300.610 through 300.626 related to protecting the confidentiality of any personally identifiable information collected, used, or maintained under Part B of the Act.