AI-generated summary, not yet reviewed by Better Utah staff. Please consult the bill text.

Contracts between schools or government agencies and outside technology vendors that handle student data would be required to include specific privacy protections under this bill, including a clause stating that the contract must be terminated if the vendor sells student data or otherwise violates state or federal privacy law. If a violation is discovered, the school or agency would have to notify the vendor and give it at least 30 days to fix the problem and prevent it from recurring; if the vendor fails to do so, the contract must be terminated, and the vendor could not charge fees or seek damages as a result. The bill also directs the State Board of Education to review reports of suspected violations, launch investigations or audits when warranted, and provide guidance materials to vendors to help them understand their privacy obligations. Additionally, it removes a current provision allowing vendors to respond directly to a student's request for information or feedback, and it adds a restriction preventing vendors from using personal identity characteristics as criteria when identifying students for nonprofit colleges or scholarship opportunities.