(1) As used in this section:
(a) "Authorized top-level domain" means any of the following suffixes that follow the domain name in a website address:
(i) gov;
(ii) edu; and
(iii) mil.
(b) "Governmental entity" means the same as that term is defined in Section 63G-2-103.
(c) "Government website" means the same as that term is defined in Section 63A-19-101.
(d) "Person" means the same as that term is defined in Section 63G-2-103.
(e) "School" means a public elementary or secondary school.
(2) Beginning July 1, 2025, a governmental entity shall use an authorized top-level domain for:
(a) the website address for the governmental entity's government website; and
(b) the email addresses used by the governmental entity and the governmental entity's employees.
(3) Notwithstanding Subsection (2), a governmental entity may operate a website that uses a top-level domain that is not an authorized top-level domain if:
(a)
(i) a reasonable person would not mistake the website as the governmental entity's primary government website; and
(ii) the government website is:
(A) solely for internal use and not intended for use by members of the public;
(B) temporary and in use by the governmental entity for a period of less than one year; or
(C) related to an event, program, or informational campaign operated by the governmental entity in partnership with another person that is not a governmental entity; or
(b) the governmental entity is a school district or a school that is not an institution of higher education and the use of an authorized top-level domain is otherwise prohibited, provided that once the use of an authorized top-level domain is not otherwise prohibited, the school district or school shall transition to an authorized top-level domain within 15 months.
(4) The chief information officer appointed under Section 63A-16-201 may authorize a waiver of the requirement in Subsection (2) if:
(a) there are extraordinary circumstances under which use of an authorized domain extension would cause demonstrable harm to citizens or businesses; and
(b) the executive director or chief executive of the governmental entity submits a written request to the chief information officer that includes a justification for the waiver.