Utah Code 53B-28-504. Notification of significant data breach

53B-28-504. Notification of significant data breach.

(1)	If a significant data breach occurs at an institution, the institution shall notify each student whose personally-identifiable student data was disclosed.

Board: means the Utah Board of Higher Education described in Section 53B-1-402. See Utah Code 53B-1-101.5
Data breach: means an unauthorized release of or unauthorized access to personally identifiable student data that an education entity maintains. See Utah Code 53B-28-501
Institution: means an institution of higher education described in Section 53B-1-102. See Utah Code 53B-28-501
Student: means an individual enrolled in an institution. See Utah Code 53B-28-501
Student data: means information about a student at the individual student level. See Utah Code 53B-28-501

(2)	In accordance with Title 63G, Chapter 3, Utah Administrative Rulemaking Act, the board shall make rules to define a significant data breach described in Subsection (1).

Enacted by Chapter 461, 2022 General Session