S.B. 267 Software in Education Amendments

Overview

Utah Senate Bill 267, officially titled "Software in Education Amendments," is a pivotal piece of legislation enacted in Utah, United States, aimed at comprehensively addressing the rapidly evolving landscape of educational technology in public schools. Signed into law on March 18, 2026, this Act mandates the Utah State Board of Education (USBE) to undertake a thorough study concerning the use of software and digital services within the state's public education system. The primary objective of this legislative initiative is to identify and establish best practices that safeguard student learning, enhance safety, and protect privacy in an increasingly digital learning environment. The bill specifically recognizes the growing integration of artificial intelligence (AI) systems within educational software, necessitating a focused examination of its implications. By requiring a detailed study, the Utah Legislature seeks to proactively develop informed guidance for Local Education Agencies (LEAs), ensuring that technology integration serves students effectively while mitigating potential risks associated with data handling, privacy breaches, and the influence of design features that may prioritize engagement over genuine learning outcomes.

The scope of S.B. 267 extends beyond a mere review of existing software. It delves into critical aspects such as the academic effectiveness of educational software, the potential for a statewide digital privacy agreement, and the nuanced distinctions between active learning and passive consumption facilitated by digital tools. Furthermore, the legislation mandates an investigation into compliance with sensitive materials requirements, robust digital privacy practices for student data, and the intricate processes of collecting and utilizing student data, including metadata and clickstream data. A significant emphasis is placed on protecting students from advertising, commercial exploitation, and the potentially addictive design features embedded in some software. Transparency regarding data collection, third-party providers, and embedded AI systems is also a core focus. The USBE is empowered to consult widely with educators, parents, technology providers, and other relevant stakeholders to ensure a comprehensive and balanced perspective in its study. The findings of this study are intended to form the basis for actionable guidance and best practices, which the USBE is required to publish and distribute to all LEAs before July 1, 2027, thereby shaping the future of educational technology use across Utah's public schools.

Definitions

S.B. 267 establishes several key definitions to clarify the scope and intent of the mandated study and subsequent guidance. "Software" is broadly defined to encompass any application, web-based service, plug-in, or other code-based product, irrespective of whether it is free or purchased. This includes software that runs on or is accessible from a school-issued device, or is assigned, required, recommended, installed, or otherwise made available by an LEA for student use in connection with classroom instruction, even if accessed via a school-issued account or identity on a student-owned device. The definition explicitly includes software used for instruction, assessment, communication, collaboration, or enrichment during school hours for school-related purposes, but excludes physical, electronic hardware. This comprehensive definition ensures that the study covers the full spectrum of digital tools students encounter in their educational journey.

Another crucial term defined by the Act is "student data," which is understood to include a student's personal data (as defined in Section 13-61-101), metadata, device identifiers, and clickstream data. It also encompasses behavioral, engagement, or usage data, and any information a software collects, generates, or infers in the course of student use. This expansive definition highlights the legislature's concern over the breadth of information gathered about students through digital platforms and underscores the need for robust privacy protections. The bill also refers to a "statewide digital privacy agreement," which is an agreement the state board is tasked with creating in accordance with Section 53G-7-1402, aimed at standardizing privacy protections across educational software. Furthermore, the study is directed to examine "addictive design features," referring to elements within software designed to maximize user engagement, potentially at the expense of educational outcomes or student well-being. These precise definitions are fundamental to ensuring that the USBE's study and the resulting best practices are targeted and effective in addressing the complex challenges and opportunities presented by modern educational technology.

Governance and Institutional Framework

The governance framework established by Utah S.B. 267 centers primarily on the Utah State Board of Education (USBE). The Act explicitly mandates the USBE to be the central authority responsible for conducting the comprehensive study on software and digital services in public schools. This positions the USBE as the lead agency in evaluating the current landscape of educational technology, identifying emergent trends, and formulating strategic recommendations. The USBE's role is not merely observational; it is tasked with actively reviewing best practices related to the educational effectiveness, design, and data practices of software used by students. This includes a critical examination of how artificial intelligence systems are integrated into these tools. The bill empowers the USBE to engage in extensive consultation with a diverse range of stakeholders, including educators who directly interact with these tools, parents who are concerned about their children's digital experiences, technology providers who develop and supply the software, and other relevant experts. This collaborative approach is designed to ensure that the study's findings are well-rounded, practical, and reflective of the varied perspectives within the educational ecosystem.

Following the completion of its study, the USBE is further obligated to publish and distribute guidance and best practices to all Local Education Agencies (LEAs) across Utah. This directive establishes the USBE as the authoritative source for standards and recommendations concerning the responsible use of software in public schools. The guidance is expected to cover a wide array of topics, from ensuring academic efficacy to safeguarding student data privacy and mitigating the risks associated with potentially addictive design features. The USBE's responsibility extends to reporting its findings to the Education Interim Committee upon request, providing legislative oversight and ensuring accountability. This institutional framework underscores a proactive approach by the state of Utah to regulate and guide the integration of technology in education, ensuring that the benefits of digital tools are harnessed while potential harms are minimized through informed policy and best practice dissemination. The USBE's work under S.B. 267 is foundational for future policy development and regulatory adjustments in the state's educational technology landscape.

Key Focus Areas

Utah S.B. 267 delineates several critical areas of focus for the State Board of Education's study on software and digital services in public schools, reflecting a comprehensive approach to addressing the challenges and opportunities presented by educational technology. A primary area of concern is the academic effectiveness of educational software. The study is tasked with reviewing whether these tools genuinely contribute to student learning outcomes, align with academic standards, and promote active learning rather than passive consumption. This focus aims to ensure that technology serves as a pedagogical enhancement rather than a mere distraction or a superficial addition to the curriculum. The bill also emphasizes the importance of distinguishing between truly engaging and academically beneficial software and those that might rely on "addictive design features" to maximize screen time without substantive educational value.

Another paramount focus area is digital privacy and student data protection. The study will rigorously examine digital privacy practices for student data, including the collection and use of various types of student information such as personal data, metadata, device identifiers, and clickstream data. A significant component involves exploring the potential for a statewide digital privacy agreement to standardize protections across different software platforms and providers. The legislation explicitly calls for safeguards against advertising, commercial exploitation of student data, and algorithmic systems that might prioritize engagement over learning outcomes. Furthermore, the study will investigate transparency requirements regarding the data software collects, the involvement of third-party service providers or sub-processors, and the presence of embedded analytics or artificial intelligence systems. The use of device features like cameras and microphones in educational software also falls under this scrutiny, highlighting concerns about surveillance and unauthorized data capture. These detailed focus areas demonstrate a legislative intent to create a secure, effective, and transparent digital learning environment for all public school students in Utah.

Implementation Framework

The implementation framework for Utah S.B. 267 is structured around the State Board of Education's (USBE) responsibility to conduct a thorough study and subsequently translate its findings into actionable guidance for Local Education Agencies (LEAs). Upon completion of the study, which is mandated to identify best practices related to student learning, safety, and privacy in the context of software and digital service use, the USBE is required to publish comprehensive guidance. This guidance will describe the identified best practices for the responsible and effective use of software in public schools. The publication of this guidance is a critical milestone, as it represents the culmination of the study's efforts and the official recommendations from the state's highest educational authority. The USBE is tasked with ensuring that this guidance is not only developed but also widely disseminated to all LEAs, making it accessible and actionable for school districts and individual schools across the state.

A specific timeline is established for the distribution of this guidance: the USBE must publish and distribute it to all LEAs before July 1, 2027. This deadline underscores the urgency and importance placed on integrating these best practices into the operational procedures of public schools. Beyond the initial publication, the implementation framework also includes a reporting mechanism, requiring the USBE to report the findings of its study to the Education Interim Committee upon request. This ensures ongoing legislative oversight and provides a channel for lawmakers to stay informed about the progress and outcomes of the study, potentially informing future legislative actions or amendments to existing educational codes. The framework is designed to be iterative, with the study serving as a foundational step for continuous improvement and adaptation in the rapidly evolving field of educational technology, particularly concerning artificial intelligence and student data management.

Monitoring and Evaluation

Utah S.B. 267 inherently establishes a robust framework for monitoring and evaluation, primarily through the mandated study itself. The very act of requiring the State Board of Education (USBE) to conduct a comprehensive study on software and digital services in public schools serves as an initial, large-scale evaluation of current practices. This study is designed to systematically review existing software use, assess its educational effectiveness, scrutinize design features, and evaluate data practices, including the integration of artificial intelligence systems. By identifying best practices, the USBE is, in effect, setting benchmarks against which current and future software implementations can be measured. The study's findings will provide a crucial baseline for understanding the landscape of educational technology in Utah and pinpointing areas that require improvement or more stringent oversight. This evaluative process is critical for ensuring that educational technology investments yield positive outcomes for students while safeguarding their privacy and well-being.

Furthermore, the requirement for the USBE to publish and distribute guidance and best practices to all Local Education Agencies (LEAs) before July 1, 2027, creates a mechanism for ongoing monitoring. While the bill does not explicitly detail a continuous auditing process for LEA compliance with the guidance, the dissemination of these best practices implicitly sets expectations for responsible software use. LEAs are expected to integrate this guidance into their local policies and procurement processes, which will, in turn, influence their selection and implementation of educational software. The provision for the USBE to report its findings to the Education Interim Committee upon request also introduces a layer of legislative oversight, allowing for periodic reviews of the study's impact and the overall adherence to the recommended best practices. This iterative process of study, guidance, and legislative review ensures that the state can adapt its approach to educational technology as new tools and challenges emerge, fostering a dynamic and responsive regulatory environment.

Penalties, Liability, and Appeals

It is important to note that Utah S.B. 267, in its current form, primarily functions as a mandate for a study and the subsequent development of guidance and best practices. As such, the bill itself does not directly establish specific penalties, liability provisions, or formal appeal processes for non-compliance. The legislation's immediate goal is to gather information, define best practices, and inform educational institutions rather than to impose immediate sanctions. The bill focuses on proactive measures, such as identifying effective and safe software use, protecting student data, and promoting transparency, which are intended to prevent issues rather than to react to them with punitive measures. Therefore, the direct legal consequences typically associated with regulatory breaches, such as fines, sanctions, or criminal penalties, are not outlined within this particular Act.

However, the findings and guidance generated by the State Board of Education (USBE) under S.B. 267 are intended to lay the groundwork for future policy and potential regulatory actions. While the bill does not create immediate liability, the best practices it produces will likely influence how Local Education Agencies (LEAs) are expected to manage educational software and student data. Non-adherence to these established best practices in the future could potentially lead to issues under existing or subsequent state laws related to student privacy, data security, or educational standards. For instance, if the study highlights significant gaps in data protection, future legislation or amendments to current education codes might introduce specific penalties or liability frameworks. Therefore, while S.B. 267 itself is not a punitive instrument, its output will serve as a critical reference point for evaluating responsible conduct and could indirectly inform legal or administrative actions in the event of egregious failures to protect students or their data in the digital learning environment. Any appeals processes would likely fall under existing administrative law procedures for challenging state board decisions or future regulations derived from this study.

Relationship to Other Instruments

Utah S.B. 267 operates within and aims to inform the broader landscape of educational and technology-related legal instruments in the state. While it is a standalone Act mandating a study, its findings and the resulting guidance are intended to be highly influential on existing and future policies. For instance, the bill explicitly references the definition of "student data" as it is defined in Section 53E-9-301 of the Utah Code, indicating its intent to align with and build upon established data privacy frameworks within the educational context. Similarly, the mention of a "statewide digital privacy agreement" that the state board creates in accordance with Section 53G-7-1402 suggests an intention to integrate the study's recommendations into a broader, standardized approach to digital privacy across educational institutions. This indicates that S.B. 267 is not an isolated piece of legislation but rather a foundational step designed to enhance and update existing legal instruments concerning student data and technology use.

The guidance and best practices developed by the State Board of Education (USBE) as a result of this study are expected to serve as a critical reference for Local Education Agencies (LEAs) in developing or revising their own local policies regarding software and digital service use. This could lead to amendments in school district administrative rules, technology acceptable use policies, and procurement guidelines for educational software. Furthermore, the USBE's reports to the Education Interim Committee could directly inform future legislative sessions, potentially leading to new statutes or amendments to the Utah Code that codify some of the recommended best practices or establish more formal regulatory requirements. The bill's focus on areas like "addictive design features" and "algorithmic systems that may prioritize engagement over learning outcomes" also positions it as a precursor to potential future legislation addressing the ethical implications of AI and design in educational technology, potentially influencing state-level consumer protection laws or digital well-being initiatives as they relate to minors in an educational setting. Thus, S.B. 267 is a catalytic instrument, designed to generate the knowledge and recommendations necessary to evolve Utah's legal and policy framework for educational technology.

International Alignment

Utah S.B. 267, as a state-level legislative initiative within the United States, primarily focuses on addressing the specific needs and regulatory environment of Utah's public education system. Therefore, it does not explicitly articulate direct alignment with international treaties, agreements, or regulatory frameworks. The bill's scope is inherently localized, concentrating on developing best practices for software use, student data privacy, and the responsible integration of AI within the state's schools. However, the fundamental principles underlying S.B. 267—such as the protection of student privacy, ensuring the academic effectiveness of educational technology, and mitigating the risks associated with AI and digital design—resonate with broader global discussions and emerging international standards concerning digital ethics, data governance, and responsible AI development. Many countries and international bodies are grappling with similar challenges regarding the impact of technology on children and education.

While not directly aligning, the study and its resulting guidance could indirectly contribute to international best practices by demonstrating a comprehensive state-level approach to these issues. For example, the emphasis on transparency regarding data collection, third-party providers, and embedded AI systems mirrors principles found in international data protection regulations like the GDPR (General Data Protection Regulation) and various national AI strategies that advocate for explainability and accountability. Similarly, the concern over "addictive design features" aligns with growing global awareness and efforts to promote digital well-being for minors. The outcomes of Utah's study could potentially serve as a case study for other jurisdictions, both nationally and internationally, that are seeking to develop their own policies for integrating technology responsibly into education. By addressing universal challenges in a structured manner, S.B. 267, while local in its application, contributes to the global conversation on responsible technology use in sensitive sectors like education.

Implementation Timeline

Compliance Checklist

Sources and References