Necessary student data: means data required by state statute or federal law to conduct the regular activities of an education entity, including:
(a)
name;
(b)
date of birth;
(c)
sex;
(d)
parent contact information;
(e)
custodial parent information;
(f)
contact information;
(g)
a student identification number;
(h)
local, state, and national assessment results or an exception from taking a local, state, or national assessment;
(i)
courses taken and completed, credits earned, and other transcript information;
(j)
course grades and grade point average;
(k)
grade level and expected graduation date or graduation cohort;
(l)
degree, diploma, credential attainment, and other school exit information;
(m)
attendance and mobility;
(n)
drop-out data;
(o)
immunization record or an exception from an immunization record;
(p)
race;
(q)
ethnicity;
(r)
tribal affiliation;
(s)
remediation efforts;
(t)
an exception from a vision screening required under Section 53G-9-404 or information collected from a vision screening described in Section 53G-9-404;
(u)
information related to the Utah Registry of Autism and Developmental Disabilities, described in Section 26B-7-115;
(v)
student injury information;
(w)
a disciplinary record created and maintained as described in Section 53E-9-306;
(x)
juvenile delinquency records;
(y)
English language learner status; and
(z)
child find and special education evaluation data related to initiation of an IEP. See Utah Code 53E-9-301
Optional student data: includes :
(i)
information that is:
(A)
related to an IEP or needed to provide special needs services; and
(B)
not necessary student data;
(ii)
biometric information; and
(iii)
information that is not necessary student data and that is required for a student to participate in a federal or other program. See Utah Code 53E-9-301
Parent: means :
(a)
a student's parent;
(b)
a student's legal guardian; or
(c)
an individual who has written authorization from a student's parent or legal guardian to act as a parent or legal guardian on behalf of the student. See Utah Code 53E-9-301
State: when applied to the different parts of the United States, includes a state, district, or territory of the United States. See Utah Code 68-3-12.5
except as required in Section 80-6-103, criminal record.
(2)
Except as provided in Subsection (3), an education entity that collects student data shall, in accordance with this section, prepare and distribute to parents and students a student data collection notice statement that:
(a)
is a prominent, stand-alone document;
(b)
is annually updated and published on the education entity’s website;
(c)
states the student data that the education entity collects;
(d)
states that the education entity will not collect the student data described in Subsection (1);
(e)
states the student data described in Section 53E-9-308 that the education entity may not share without written consent;
(f)
includes the following statement: “The collection, use, and sharing of student data has both benefits and risks. Parents and students should learn about these benefits and risks and make choices regarding student data accordingly.”;
(g)
describes in general terms how the education entity stores and protects student data; and
(h)
states a student’s rights under this part.
(3)
The state board may publicly post the state board’s collection notice described in Subsection (2).
(4)
An education entity may collect the necessary student data of a student if the education entity provides a student data collection notice to:
(a)
the student, if the student is an adult student; or
(b)
the student’s parent, if the student is not an adult student.
(5)
An education entity may collect optional student data if the education entity:
(a)
provides, to an individual described in Subsection (4), a student data collection notice that includes a description of:
(i)
the optional student data to be collected; and
(ii)
how the education entity will use the optional student data; and
(b)
obtains written consent to collect the optional student data from an individual described in Subsection (4).
(6)
An education entity may collect a student’s biometric identifier or biometric information if the education entity:
(a)
provides, to an individual described in Subsection (4), a biometric information collection notice that is separate from a student data collection notice, which states:
(i)
the biometric identifier or biometric information to be collected;
(ii)
the purpose of collecting the biometric identifier or biometric information; and
(iii)
how the education entity will use and store the biometric identifier or biometric information; and
(b)
obtains written consent to collect the biometric identifier or biometric information from an individual described in Subsection (4).
(7)
Except under the circumstances described in Subsection 53G-8-211(2), an education entity may not refer a student to an evidence-based alternative intervention described in Section 53G-8-211 without written consent.
(8)
Nothing in this section prohibits an education entity from including additional information related to student and parent privacy in the notice described in Subsection (2).
