AI-generated summary, not yet reviewed by Better Utah staff. Please consult the bill text.

Utah schools, school districts, and colleges would face new rules around how they handle students' educational data, including transcripts, enrollment records, course history, and academic credentials, under this bill. Schools and colleges could only share this data with outside parties after getting the student's clear, voluntary, informed consent (or a parent's consent if the student is under 18), and starting July 1, 2027, they would have to offer a secure digital option as the main way to collect that consent while still allowing written consent when digital access isn't reasonably available. Schools and colleges could not require students to waive unrelated rights, bundle unrelated terms into a consent request, or otherwise restrict a student's ability to grant or manage consent, though they could impose reasonable time-based limits on technical access as long as students can regain access later. If a third party that receives data on more than 10 students violates these rules, the affected student could sue that third party directly, though not the school or college itself; both the State Board of Education and the Utah Board of Higher Education could issue optional guidance on best practices for obtaining consent.