Utah Code § 53H-14-303: Permitted activities.

(1) This part does not prohibit an institution from requesting or requiring a student to disclose a username or password to gain access to or operate the following:

(a) an electronic communications device supplied by or paid for in whole or in part by the institution; or

(b) an account or service provided by the institution that is either obtained by virtue of the student's admission to the institution or used by the student for educational purposes.

(2) This part does not prohibit or restrict an institution from viewing, accessing, or using information about a student or prospective student that can be obtained without the information described in Subsection 53H-14-302(1) or that is available in the public domain.