In accordance with Title 63G, Chapter 3, Utah Administrative Rulemaking Act, the state board shall make rules that:
(1) using reasonable data industry best practices, prescribe the maintenance and protection of stored student data by:
(a) an education entity;
(b) the Utah Registry of Autism and Developmental Disabilities, described in Section 26B-7-115, for student data obtained under Section 53E-9-308; and
(c) a third-party contractor; and
(2) state requirements for an education entity's metadata dictionary.