53H-14-502. State student data protection governance.
(1) The chief privacy officer shall establish a higher education privacy advisory group to advise institutions and institution boards of trustees on student data protection.
(2) The advisory group shall consist of: the chief privacy officer; the higher education privacy officer; and the following members, appointed by the commissioner: at least one Utah System of Higher Education employee; and at least one representative of the Utah Board of Higher Education.
(3) The advisory group shall: discuss and make recommendations to the board and institutions regarding: existing and proposed: board rules; or board policies of the Utah Board of Higher Education or institutions; and training on protecting student data privacy; and perform other tasks related to student data protection as designated by the Utah Board of Higher Education.
(4) The higher education privacy officer shall: provide training and support to institution boards and employees; and produce: resource materials; model data governance plans; model forms for institution student data protection governance; and a model data collection notice.
(5) The board shall: create and maintain a data governance plan; and annually publish the data governance plan on the Utah System of Higher Education website; and establish standards for: institution policies to protect student data; institution data governance plans; and a third-party contractor's use of student data.