AI-generated summary, not yet reviewed by Better Utah staff. Please consult the bill text.

Utah's school cybersecurity requirements would be significantly expanded under this bill, which directs the state's Cybersecurity Commission to write rules setting minimum cybersecurity standards for school districts and charter schools, modeled on nationally recognized frameworks and covering areas like data protection, network security, vulnerability management, staff training, and incident response, with compliance phased in based on each school system's size and resources. The bill also adds AI-enabled "smart glasses" to the list of devices students cannot use during classroom hours, joining cellphones, smartwatches, and other similar technology, while keeping existing exceptions for emergencies, safety threats, the SafeUT crisis line, medical needs, and IEP or 504 plan accommodations; it also includes language coordinating this restriction with a separate bill (SB69) that would extend the device ban to all school hours if both measures pass. Schools would be required to report data breaches to the Utah Cyber Center as already required under state law, additionally notify the State Board of Education within 24 hours of discovering a breach, designate a staff member (or, for smaller districts, a regional education service agency) as the point of contact for cybersecurity matters, and cooperate with statewide information-sharing and incident-response efforts coordinated by the Cyber Center, State Board, and Utah Education and Telehealth Network. Finally, the bill adds two new members to the state's Cybersecurity Commission — one charter school and one school district employee with systems and security responsibilities — to help shape the standards school systems will need to follow.