Use of authorized domain extensions for government websites.

Utah Code § 63A-16-110, under Part 63A-16-1: General Provisions.

Utah Code § 63A-16-110

63A-16-110. Use of authorized domain extensions for government websites.

(1) As used in this section: "Authorized top-level domain" means any of the following suffixes that follow the domain name in a website address: gov; edu; and mil. "Governmental entity" means the same as that term is defined in Section. 63G-2-103 "Government website" means the same as that term is defined in Section. 63A-19-101 "Person" means the same as that term is defined in Section. 63G-2-103 "School" means a public elementary or secondary school.

(2) Beginning July 1, 2025, a governmental entity shall use an authorized top-level domain for: the website address for the governmental entity's government website; and the email addresses used by the governmental entity and the governmental entity's employees.

(3) Notwithstanding Subsection (2), a governmental entity may operate a website that uses a top-level domain that is not an authorized top-level domain if: a reasonable person would not mistake the website as the governmental entity's primary government website; and the government website is: solely for internal use and not intended for use by members of the public; temporary and in use by the governmental entity for a period of less than one year; or related to an event, program, or informational campaign operated by the governmental entity in partnership with another person that is not a governmental entity; or the governmental entity is a school district or a school that is not an institution of higher education and the use of an authorized top-level domain is otherwise prohibited, provided that once the use of an authorized top-level domain is not otherwise prohibited, the school district or school shall transition to an authorized top-level domain within 15 months.

(4) The chief information officer appointed under Sectionmay authorize a waiver of the requirement in Subsection (2) if: 63A-16-201 there are extraordinary circumstances under which use of an authorized domain extension would cause demonstrable harm to citizens or businesses; and the executive director or chief executive of the governmental entity submits a written request to the chief information officer that includes a justification for the waiver.