I. PolicySummit Academy and Summit Academy High School collects necessary student data toconduct the regular activities of the school. The school(s) may also collect student datawith written consent from the student’s parent or from a student who has turned 18 yearsof age.A. Necessary Student Data• Student Name, Date of birth, and Sex• Parent and student contact information and Custodial parent information• A student identification number (including the student’s school ID numberand the state-assigned student identifier, or SSID)• Local, state, and national assessment results or an exception from taking alocal, state, or national assessment (click here for more information onassessments)• Courses taken and completed, credits earned, and other transcript information• Course grades and grade point average• Grade level and expected graduation date or graduation cohort• Degree, diploma, credential attainment, and other school information• Attendance and mobility• Drop-out data• Immunization record or an exception from an immunization record• Race, Ethnicity, or Tribal affiliation• Remediation efforts• An exception from a vision screening required under Utah Code Section53G-9-404 or information collected from a vision screening described in UtahCode Section 53G-9-404• Information related to the Utah Registry of Autism and DevelopmentDisabilities (URADD), described in Utah Code Section 26-7-4• Student injury information• A disciplinary record created and maintained as described in Utah CodeSection 53E-9-306• Juvenile delinquency records• English language learner status• Child find and special education evaluation data related to initiation of an IEPApproval: March 20, 2025 7302 – Student Data Collection and Privacy Policy 2B. Optional Student Data• Information related to an IEP or needed to provide special needs services• Biometric information used to identify the student• Information required for a student to participate in an optional federal or stateprogram (e.g., information related to applying for free or reduced lunch)Certain sensitive information on students collected via a psychological or psychiatricexamination, test, or treatment, or any survey, analysis, or evaluation will only becollected with parental consent. The parents/guardians will receive a separate consentform in these cases. See Summit Academy’s Protection of Pupil Rights Act (PPRA)notice for more information.C. Prohibited CollectionsSummit Academy will not collect a student’s social security number or criminalrecord, except as required by Utah Code Section (80-6-103)D. Data SharingSummit Academy will only share student data in accordance with the FamilyEducational Rights and Privacy Act (FERPA), which generally requires writtenparental consent before sharing student data. FERPA includes several exceptionsto this rule, where Summit Academy may share student data without parentalconsent. For more information on third parties receiving student information fromus, see Summit Academy’s Metadata Dictionary.Student data will be shared with the Utah State Board of Education via the UtahTranscript and Records Exchange (UTREx). For more information about UTREx andhow it is used, please visit the Utah State Board of Education’s Information Technologywebsite.E. Benefits, Risks, and Parent ChoicesThe collection, use, and sharing of student data has both benefits and risks.Parents and students should learn about these benefits and risks and make choicesregarding student data accordingly. Parents are given the following choicesregarding student data:• Choice to request to review education records of their children and request anexplanation or interpretation of the records (see Summit Academy’s annualFERPA notice for more information)• Choice to contest the accuracy of certain records (see Summit Academy’sannual FERPA notice for more information), potentially leading to thecorrection, expungement, or deletion of the record Approval: March 20, 2025 7302 – Student Data Collection and Privacy Policy 3• Choice to opt into certain data collections (see the section above on optionaldata collections)• Choice to opt out of certain data exchangeso Information that has been classified as directory information (seeSummit Academy’s directory information notice for moreinformation)o Parents of students with an IEP may have their information sharedwith the Utah Registry of Autism and Developmental Disabilities(URADD). If included in this data exchange, parents will receive aseparate notice within 30 days of the exchange, informing them oftheir right to opt out, per Utah Code Section 53E-9-308(6)(b)• Choice to file a complaint if parents/guardians believe the school or its agentsare violating their rights under FERPA or Utah’s Student Data Protection Act.If parents/guardians have a complaint or concern, Summit Academyrecommends contacting Summit Academy’s Data Security Officer at 801-572-9007 and then escalating to the state and US Department of Education ifneeded.F. Storage and SecurityIn accordance with Board Rule R277-487-3(14), Summit Academy has adopteda cybersecurity framework called the CIS Controls.II. ReferencesUtah Code Section 53G-9-404Utah Code Section 26-7-4Utah Code Section 53E-9-306Utah Code Section (80-6-103)Utah Code Section 53E-9-308(6)(b)Utah Admin Code R277-487-3(14)III. AttachmentsN/AIV. Revision History and Approval DateVersion 1: January 16, 2020: Original date of approvalVersion 2: October 27, 2022: Reviewed and no changes madeVersion 3: March 27, 2025: State Code Change to Prohibited Collections