1. (1) As used in this section:

   1. (a) "Authorized top-level domain" means any of the following suffixes that follow the domain name in a website address:

      1. (i) gov;
      2. (ii) edu; and
      3. (iii) mil.
   2. (b) "Governmental entity" means the same as that term is defined in Section 63G-2-103.
   3. (c) "Government website" means the same as that term is defined in Section 63A-19-101.
   4. (d) "Person" means the same as that term is defined in Section 63G-2-103.
   5. (e) "School" means a public elementary or secondary school.

2. (2) Beginning July 1, 2025, a governmental entity shall use an authorized top-level domain for:

   1. (a) the website address for the governmental entity's government website; and
   2. (b) the email addresses used by the governmental entity and the governmental entity's employees.

3. (3) Notwithstanding Subsection (2), a governmental entity may operate a website that uses a top-level domain that is not an authorized top-level domain if:

   1. (a)

      1. (i) a reasonable person would not mistake the website as the governmental entity's primary government website; and

      2. (ii) the government website is:

         1. (A) solely for internal use and not intended for use by members of the public;
         2. (B) temporary and in use by the governmental entity for a period of less than one year; or
         3. (C) related to an event, program, or informational campaign operated by the governmental entity in partnership with another person that is not a governmental entity; or
   2. (b) the governmental entity is a school district or a school that is not an institution of higher education and the use of an authorized top-level domain is otherwise prohibited, provided that once the use of an authorized top-level domain is not otherwise prohibited, the school district or school shall transition to an authorized top-level domain within 15 months.

4. (4) The chief information officer appointed under Section 63A-16-201 may authorize a waiver of the requirement in Subsection (2) if:

   1. (a) there are extraordinary circumstances under which use of an authorized domain extension would cause demonstrable harm to citizens or businesses; and
   2. (b) the executive director or chief executive of the governmental entity submits a written request to the chief information officer that includes a justification for the waiver.

Renumbered and Amended by Chapter 475, 2025 General Session