There's more nuance to it but those are the basics.

Mind you, there are extra book-keeping rules. For instance, the highest salaries at an institution (and I believe salaries over a certain amount) and who is making them must be publicly disclosed.