(c) All persons collecting or using personally identifiable information must receive training or instruction regarding the State's policies and procedures under Sec. 300.123 and 34 CFR part 99.