Technology

HB 42 establishes minimum cybersecurity standards for Utah's public schools (local education agencies) and expands the Utah Cyber Center's role to provide dedicated security services to schools. It requires schools to implement specific measures like multi-factor authentication, patch management, and endpoint detection systems, while mandating incident reporting to the Cyber Center. The law also directs the State Board of Education to develop implementation guidelines and creates new reporting requirements for cybersecurity breaches in educational settings. These changes directly affect all Utah public schools and their cybersecurity practices, aiming to strengthen protection for student and school data. The bill contains no new funding and amends several existing Utah Code sections related to education and cybersecurity.