{"data":{"id":"us-ut/utah-code-53e-9-304","jurisdiction":"us-ut","citation":"Utah Code § 53E-9-304","heading":"Student data ownership and access -- Notification in case of significant data breach.","body":"(1)\n(a) A student owns the student's personally identifiable student data.\n(b) An education entity shall allow the following individuals to access a student's student data that is maintained by the education entity:\n(i) the student's parent;\n(ii) the student; and\n(iii) in accordance with the education entity's internal policy described in Section 53E-9-303 and in the absence of a parent, an individual acting as a parent to the student.\n(2)\n(a) If a significant data breach occurs at an education entity, the education entity shall notify:\n(i) the student, if the student is an adult student; or\n(ii) the student's parent, if the student is not an adult student.\n(b) In accordance with Title 63G, Chapter 3, Utah Administrative Rulemaking Act, the state board shall make rules to define a significant data breach described in Subsection (2)(a).","path":["Title 53E Public Education System -- State Administration","Chapter 53E-9 Student Privacy and Data Protection","Part 53E-9-3 Student Data Protection"],"source_url":"https://le.utah.gov/xcode/Title53E/Chapter9/53E-9-S304.html","current_through":"2026 General Session","vintage":"","retrieved_at":"2026-09-03T11:34:33Z","sha256":"db30b89b90ff2994c61880771ec58e7a79052d69480beb526147ea2c9c5fc5fc","source_id":"us-ut","stale":false,"prev":"us-ut/utah-code-53e-9-303","next":"us-ut/utah-code-53e-9-305"},"notice":"GroundRules: Original legal text. Not legal advice."}