Utah § 53E-9-304 Student data ownership and access -- Notification in case of significant data breach.

Utah Statutes

§ 53E-9-304 — Student data ownership and access -- Notification in case of significant data breach.

Utah § 53E-9-304

Title 53EPublic Education System -- State Administration

Ch. 53E-9Student Privacy and Data Protection

Part 53E-9-3Student Data Protection

This text of Utah § 53E-9-304 (Student data ownership and access -- Notification in case of significant data breach.) is published on Counsel Stack Legal Research, covering Utah primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook

Utah Code Ann. § 53E-9-304 (2026).

Text

(1)(1)(a) A student owns the student's personally identifiable student data.

(1)(b) An education entity shall allow the following individuals to access a student's student data that is maintained by the education entity:

(1)(b)(i) the student's parent;

(1)(b)(ii) the student; and

(1)(b)(iii) in accordance with the education entity's internal policy described in Section 53E-9-303 and in the absence of a parent, an individual acting as a parent to the student.

(2)(2)(a) If a significant data breach occurs at an education entity, the education entity shall notify:

(2)(a)(i) the student, if the student is an adult student; or

(2)(a)(ii) the student's parent, if the student is not an adult student.

(2)(b) In accordance with Title 63G, Chapter 3, Utah Administrative Rulemaking Act, the state b

Free access — add to your briefcase to read the full text and ask questions with AI

(1) (1)(a) A student owns the student's personally identifiable student data.
(1)(b) An education entity shall allow the following individuals to access a student's student data that is maintained by the education entity:
(1)(b)(i) the student's parent;
(1)(b)(ii) the student; and
(1)(b)(iii) in accordance with the education entity's internal policy described in Section 53E-9-303 and in the absence of a parent, an individual acting as a parent to the student.
(2) (2)(a) If a significant data breach occurs at an education entity, the education entity shall notify:
(2)(a)(i) the student, if the student is an adult student; or
(2)(a)(ii) the student's parent, if the student is not an adult student.
(2)(b) In accordance with Title 63G, Chapter 3, Utah Administrative Rulemaking Act, the state board shall make rules to define a significant data breach described in Subsection (2)(a).