Law / United States / 
Utah
Higher Education Student Data Protection: Board and institution governance, student data protection policies, data governance plan and training record
Utah Code 53H-14-502 and 53H-14-503
In force since .
A sensitive categories rule binding government bodies.
- Obligation class
- Governance, Disclosure
What it requires
- If you are a Utah public college, university or technical college, adopt policies to protect student data in accordance with the Higher Education Student Data Protection part and board rule, including the standards the Utah Board of Higher Education establishes (Utah Code 53H-14-503(1)(a)).
- Designate an individual to act as the primary contact for the higher education privacy officer (Utah Code 53H-14-503(4)(a)).
- Create and maintain an institution data governance plan that complies with the board's standards and a record of student data privacy training, and annually publish the plan on the institution's website (Utah Code 53H-14-503(4)(b) and (c)).
- If you are the Utah Board of Higher Education, create and maintain a data governance plan, publish it annually on the Utah System of Higher Education website, and establish standards for institution policies to protect student data, institution data governance plans, and a third-party contractor's use of student data (Utah Code 53H-14-502(5)).
- If you are the Utah Board of Higher Education, designate a higher education privacy officer (Utah Code 53H-14-503(2)).
These lines are LexLint's reading of the law's text.
What this law does
An institution must adopt policies to protect student data in accordance with the Higher Education Student Data Protection part and board rule, including the standards the Utah Board of Higher Education establishes. An institution must designate an individual to act as the primary contact for the higher education privacy officer.
An institution must create and maintain a data governance plan that complies with the board's standards and a record of student data privacy training, and must annually publish the plan on its website.
The Utah Board of Higher Education must create and maintain a data governance plan, publish it annually on the Utah System of Higher Education website, and establish standards for institution policies to protect student data, institution data governance plans, and a third-party contractor's use of student data. The board must designate a higher education privacy officer, who verifies compliance with student privacy laws, rules, and policies throughout the Utah System of Higher Education.
Senate Bill 1001 of the 2025 First Special Session renumbered section 53B-28-503 as section 53H-14-503. Senate Bill 226 of the 2022 General Session enacted the Higher Education Student Data Protection part. Senate Bill 226 of the 2022 General Session took effect on .
When LexLint raises it
When your app profile says your app serves colleges and universities.
Back to the example · Lint your app
Page updated .