(1) using reasonable data industry best practices, prescribe the maintenance and protection of stored student data by: (a) an education entity; (b) the Utah Registry of Autism and Developmental Disabilities, described in Section 26-7-4, for student data obtained under Section 53E-9-308; and (c) a third-party contractor; and
(a) an education entity;
(b) the Utah Registry of Autism and Developmental Disabilities, described in Section 26-7-4, for student data obtained under Section 53E-9-308; and
(c) a third-party contractor; and
(2) state requirements for an education entity's metadata dictionary.