Utah Code Title 53B. State System of Higher Education § 53B-28-506. Penalties

(a) except as provided in Subsection (2), may not enter into a future contract with an institution;

(b) may be required by the board to pay a civil penalty of up to $25,000; and

(c) may be required to pay:

(a) the education entity determines that the third-party contractor has corrected the errors that caused the unauthorized collecting, sharing, or use of student data; and

(b) the third-party contractor demonstrates:

(3)(a) If necessary, the board may bring an action in a court with jurisdiction under Title 78A, Judiciary and Judicial Administration, to enforce payment of the civil penalty described in Subsection (1)(b).

(b) Notwithstanding Title 78B, Chapter 3a, Venue for Civil Actions, the board shall bring an action described in Subsection (3)(a) in the county in which the office of the education entity is located if the action is brought in the district court.

(5)(a) A student or a minor student's parent may bring an action against a third-party contractor in a court with jurisdiction under Title 78A, Judiciary and Judicial Administration, for damages caused by a knowing or reckless violation of Section 53B-28-505 by a third-party contractor.

(b) If the court finds that a third-party contractor has violated Section 53B-28-505, the court may award to the parent or student: