This bill directs the State Board of Education to establish minimum cybersecurity standards for local education agencies.
This bill:
- prohibits certain devices in schools;
- directs the Cybersecurity Commission to make rules establishing minimum cybersecurity standards for local education agencies (LEAs) aligned with industry recognized frameworks;
- establishes a phased implementation timeline for LEA compliance;
- requires coordination among the Utah Cyber Center, the State Board of Education, and the Utah Education and Telehealth Network;
- establishes reporting requirements for cybersecurity incidents;
- requires the State Board of Education to provide implementation support and resources;
- includes a coordination clause to incorporate changes made to Section 53G-7-227 with changes made to that section in S.B. 69, School Device Revisions; and
- makes conforming changes.
Recommended by: Law Enforcement and Criminal Justice Interim Committee

Statutes affected:
Introduced: 53G-7-227, 53H-4-213.4, 63A-16-1101, 63A-16-1102, 63A-16-1103, 63A-19-101, 63C-27-201
Substitute #1: 53G-7-227, 53H-4-213.4, 63C-27-201
Substitute #2: 53G-7-227, 63C-27-201, 63C-27-202
Substitute #3: 53G-7-227, 63C-27-201, 63C-27-202