SB 296 requires Utah schools and colleges to obtain clear, informed consent from students before sharing their educational data (like transcripts, enrollment records, and course history). It mandates a secure digital consent system by July 2027, prohibits bundling unrelated terms with consent requests, and ensures students can revoke consent anytime. The bill directly affects students (including minors, where parents must consent) and educational institutions, while prohibiting schools from restricting consent rights or requiring waivers of unrelated privacy protections. It aligns with federal FERPA law but adds Utah-specific rules for data disclosure, including creating a private right of action if third parties violate these requirements.
SB 298, the "Programmable Money Amendments," modifies Utah's Uniform Commercial Code to regulate digital payment methods (like digital tokens or programmable currency). It directly affects businesses that issue or accept programmable money by requiring them to offer free non-digital payment options and banning discrimination based on political views, religion, medical history, or lawful firearm ownership. The bill prohibits denying transactions due to environmental/social/governance compliance or diversity programming, mandates written explanations for denied transactions within 30 days, and allows affected parties to seek punitive damages or revoke an issuer’s license. It explicitly clarifies that the law does not restrict cryptocurrency purchases or sales by any party.
HB 320 amends Utah's existing Artificial Intelligence Policy framework by clarifying definitions (like "artificial intelligence" and "regulatory mitigation agreement"), updating the Office of Artificial Intelligence Policy's duties, and modifying the Artificial Intelligence Learning Laboratory Program. The bill establishes a structured process for AI companies to test new technologies under temporary regulatory flexibility (via "regulatory mitigation agreements") while requiring them to report findings and safeguard consumer data. It directly affects state agencies managing AI regulation, AI developers participating in the Learning Laboratory, and Utah consumers through future policy guidance. The Office must annually report program outcomes and policy recommendations to the legislature, with no new funding requested.
HB 218 amends Utah’s requirements for digital literacy education in grades 7 and 8, directly affecting public school students in those grades starting the 2027-2028 school year. The bill defines specific digital skills concepts (such as online ethics, AI literacy, cybersecurity, social media impact, and misinformation evaluation) that must be covered in the course. It also establishes an advisory tech council to guide curriculum development, recommend resources, and advise on emerging technologies. The changes update existing education codes without new funding, focusing on standardizing digital literacy instruction across Utah schools.
This bill changes Utah school device rules to ban cellphones, smart watches, and similar "emerging technology" during all school hours (including lunch, recess, and transitions), not just during instructional time. It affects all students in Utah public schools by expanding device restrictions from classroom hours to the entire school day. Exceptions allow device use for emergencies, medical needs, IEP accommodations, or the SafeUT Crisis Line. School districts must adopt policies aligning with these rules, effective July 1, 2026.
HB 182 prohibits Utah medical and genomic research facilities from using genetic sequencers or software developed by foreign adversaries (as defined by federal law) or storing genetic data within foreign adversary countries. It requires facilities to certify compliance with these rules by December 2028 and every decade thereafter, while banning remote access to non-public genetic data by entities in foreign adversary nations without written approval. Violations carry $10,000 fines per instance, enforced by the attorney general, who may also pursue civil actions for damages. The bill protects employees who report suspected violations to the attorney general from workplace retaliation. It takes effect January 1, 2028.
SB 123 amends Utah's cybersecurity law to expand the Utah Cyber Center's responsibilities and structure. It requires the Center to collaborate with the Department of Environmental Quality and include local education agencies in its cybersecurity efforts, while adding a representative from the Utah Education and Telehealth Network to the Cybersecurity Commission. The bill changes the deadline for the statewide cybersecurity plan to January 1, 2027, and creates a restricted account for nonlapsing funds to support cybersecurity tools, incident response, and strategic planning using existing and future funding sources without new legislative appropriations. These changes directly affect the Cyber Center, local education agencies, and the Cybersecurity Commission.
HB 59 requires businesses serving alcohol (including restaurants, bars, taverns, and beer retailers) to verify the age of individuals appearing to be 35 years old or younger before serving them alcohol or admitting them to the premises. It mandates electronic verification of ID using state-approved technology, limits displayed information to basic details (name, age, ID number), and requires businesses to retain verification data for seven days. The bill also allows authorized personnel to confiscate suspected fake IDs and report them to law enforcement. This law takes effect May 6, 2026, and applies retroactively from January 1, 2026.
HB 55 requires schools and government agencies contracting with education technology vendors to include specific privacy clauses in their agreements. It mandates that if a vendor illegally sells student data (violating state or federal law), the school must notify the vendor within 30 days and terminate the contract if the violation isn’t fixed within another 30 days. The bill also prohibits vendors from charging fees or seeking damages for contract termination due to privacy violations and repeals a prior provision allowing vendors to respond to student feedback requests. This directly affects schools, their ed tech vendors, and student data privacy protections under Utah law.
SB 5 is the General Government Base Budget bill for Utah's fiscal years 2026 (July 1, 2025-June 30, 2026) and 2027 (July 1, 2026-June 30, 2027). It appropriates a total of $538.3 million for state agency operations in FY2026, including $387.1 million for FY2027, primarily from the General Fund and Income Tax Fund. The bill allocates specific funds to agencies like the Department of Commerce (for business licensing and AI policy development), Insurance Department (for autism coverage and fraud programs), and Tax Commission (for license plates and tax administration). These funds cover ongoing operations, system upgrades, and program activities without specifying new policy changes or eligibility criteria.
