53H-14-503. Institution student data protection governance.
(1) An institution shall adopt policies to protect student data in accordance with this part and board rule, including the standards the board establishes under Subsection. 53H-14-502(5) The policies described in Subsectionshall take into account the specific needs and priorities of the institution. (1)(a)
(2) The board shall designate a higher education privacy officer.
(3) The higher education privacy officer shall: verify compliance with student privacy laws, rules, and policies throughout the Utah System of Higher Education; support institutions in developing data governance plans and student data privacy training; and act as the primary point of contact for the state privacy auditor.
(4) An institution shall: designate an individual to act as the primary contact for the higher education privacy officer; create and maintain an institution: data governance plan that complies with the standards the board establishes under Subsection; and 53H-14-502(5) record of student data privacy training; and annually publish the institution's data governance plan on the institution's website.