Law / United States / 
Utah
Higher Education Student Data Protection: notice to students of a significant data breach at an institution
In force since .
A breach notification rule binding government bodies.
- Obligation class
- Breach notice
What it requires
- If you are a Utah public college, university or technical college, notify each student whose personally identifiable student data was disclosed if a significant data breach occurs at the institution (Utah Code 53H-14-504(1)).
These lines are LexLint's reading of the law's text.
What this law does
If a significant data breach occurs at an institution, the institution must notify each student whose personally identifiable student data was disclosed. The Utah Board of Higher Education must make rules in accordance with the Utah Administrative Rulemaking Act to define a significant data breach. A data breach, for the part, is an unauthorized release of or unauthorized access to personally identifiable student data that an education entity maintains.
Senate Bill 1001 of the 2025 First Special Session renumbered section 53B-28-504 as section 53H-14-504. Senate Bill 226 of the 2022 General Session enacted the Higher Education Student Data Protection part. Senate Bill 226 of the 2022 General Session took effect on .
When LexLint raises it
When your app profile says your app serves colleges and universities.
Back to the example · Lint your app
Page updated .