Privacy Policy

my529 is committed to safeguarding your privacy

This privacy policy sets out how my529 uses and protects any personal information gathered when you visit my529.org or when you submit documents. Personal information includes data, both public and nonpublic, that may be used to identify an individual.

Policy

my529 respects the right to privacy of an account owner/ agent and beneficiary and recognizes my529’s obligation to keep account information secure and confidential. my529 maintains physical, electronic, and procedural safeguards reasonably designed to protect private personal information.

Collecting Information

Personal information my529 collects

my529 collects nonpublic personal information about the account owner/agent, successor account owner/ agent, and beneficiary from the following sources:

  • Account Agreements or other forms submitted to my529.
    • If an individual enters information on an online application or form, my529 may store the information even if the application or form is not completed or submitted.
  • Transactions with my529 or other institutions, such as banks and credit unions, that affect account owners’ my529 accounts.
  • my529’s website, my529.org (my529 may collect information automatically from account owners, using cookies and similar text files to keep track of their preferences).
  • Third parties designated to verify identity or prevent fraud.
  • Third parties that the account owner authorizes to provide information to my529.
  • Third parties that the account owner designates to have access to his or her account(s).

Personal information collected from any source may include, among other things, the name, address, Social Security or Taxpayer Identification Number, date of birth, and information about accounts at other institutions of the account owner/agent, successor account owner/ agent, and beneficiary.

How my529 uses your personal information

my529 uses your personal information:

  • To establish your account.
  • To administer the program.
  • For communication purposes.

my529 does not sell information about a current or former account owner/agent or beneficiary to third parties. my529 also does not disclose any nonpublic private information about a current or former account owner/agent or beneficiary to anyone, except with express permission, when needed to conduct business, or as required by law. Here are the details:

  • my529 restricts access to private personal information about an account owner/agent to individuals authorized to have access to such information, or to employees who need to know such information to provide account services to the account owner/agent.
  • To complete certain transactions or account changes that the account owner/agent directs, it may be necessary to provide identifying information to companies, individuals, or groups that are not affiliated with my529. For example, if an account owner/agent asks to transfer money from another financial institution to my529, my529 may need to provide certain information about the account owner/agent to that financial institution to complete the transaction.
  • In certain instances, my529 may contract with third parties to perform services for my529. Where necessary or appropriate for the performance of such services, my529 will disclose information about the account owner/agent/beneficiary/successor owner or agent to these third parties. In all such cases, my529 provides the third party with only the information necessary to carry out its assigned responsibilities, and only for that purpose. my529 also requires these third parties to take measures to protect the account owner’s/agent’s/beneficiary’s/successor owner’s or agent’s private information.
  • my529 will release information if compelled by law to do so or in other legally limited circumstances (e.g., to prevent or report fraud or suspicious activity).

my529 maintains physical, electronic, and procedural safeguards reasonably designed to comply with federal regulations to guard nonpublic personal information.

Personal information my529 collects online

When you visit my529.org, my529 collects certain technical and navigational information, such as computer browser type, internet protocol address, webpage visits and average time spent on the website. Information may be used for the following purposes:

  • To alert the visitor to software compatibility issues.
  • To resolve technical or service problems.
  • To analyze and improve the design and functionality of my529.org.
  • To improve my529’s ability to serve the account owner and their account(s).

Using Information

How my529 handles and discloses personal information it collects

my529 does not sell information about a current or former account owner or beneficiary to third parties.

my529 restricts access to private personal information about an account or account owner to individuals who are authorized to have that access, including those who need to know the information to provide account services.

my529 does not disclose any private information about a current or former account owner or beneficiary to anyone, except in the following cases:

  • With their express permission.
  • When needed to administer the program.
  • As required by law or in other legally limited circumstances such as to prevent fraud or report suspicious activity.

my529 may share your personal information with others, such as:

  • Our affiliates, government entities and regulatory bodies.
  • People or entities with whom you have requested us to share information.
  • Third parties we use to support our services, including, for example:
    • Companies that provide technical support and assistance for my529.org.
    • Independent contractors and service providers, including entities or consortia that conduct research on topics such as increasing 529 plan enrollment and maximizing the savings of 529 plan participants.
    • Financial institutions that process payments.
    • Banks or other organizations that require certain information to complete account changes you direct.
  • A buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of my529’s assets.

Data provided to research entities or consortia generally will not include names, Social Security numbers, account numbers, or individual contact information, but may include items such as ZIP code, age, demographic characteristics, or other data items.

In instances when my529 discloses information about the account owner to an outside party, the outside party will receive only the information necessary to carry out its assigned duties, and only for that purpose. The outside party is required to treat the information as confidential.

my529 maintains physical, electronic and procedural safeguards reasonably designed to comply with federal regulations to protect personal information.

Protecting Information

What the account owner can do to protect privacy

Account owners should keep all account information confidential to safeguard their accounts. You should never share your username or password with anyone or any entity.

Account owners should never share account information with third parties except through authorized interested party access or limited power of attorney authority granted by the account owner for selected my529 account(s). my529 allows account owners to authorize limited transactional data sharing with external financial institutions as described below. my529 is not responsible for any acts or omissions by third parties who are given interested party access to, or limited power of attorney authority over, account information by account owners.

Anyone who suspects unauthorized account activity should contact my529 or any other appropriate authorities immediately.

How my529 protects your privacy online

my529 uses some of the most secure forms of online communication available, including data encryption, usernames and passwords, and two-factor authentication. my529 uses extended validation (EV) certificate technology to guard against phishing attacks. Many internet browsers, such as Chrome, Firefox, Edge and Safari, recognize my529’s EV certificate by displaying my529’s web address in green in the browser address bar.

Sharing your account transactional data with external financial institutions

Account owners have the option to share limited transactional data from their account(s) with external financial institutions.

Before sharing data, an account owner must activate their my529 account online and successfully enroll in multi-factor authentication. The account owner will initiate the data-sharing process on the external financial institution’s website or mobile application. During the initial setup process, the account owner will be directed to a my529 login site to authorize sharing. The account owner’s my529 username and password are not provided to, nor saved by, the external financial institution.

Account owners should secure and never share their username and password. Sharing preferences may be modified by logging in to their online my529 account. Account owners will be required to periodically reauthorize data sharing.

Any data the account owner authorizes to be shared with an external financial institution is no longer under the data and privacy protection policies of my529. my529 assumes no responsibility for the loss, exploitation, or misuse of data shared with an external financial institution.

my529 reserves the right to end data-sharing with an external financial institution for any reason, at any time, and without notice. Data sharing with external financial institutions is supported through a secure, time-limited tokenized API process. Not all external financial institutions participate in data sharing with my529.

Cookies

my529’s website uses cookies and pixels. By using this website, you consent to my529’s use of cookies and pixels in accordance with the terms of this privacy policy. Cookies and pixels are files sent by web servers to web browsers and are stored by the web browsers. The information in the files is then sent back to the server each time the browser requests a page from the server. This process enables a web server to identify and track web browsers.

my529 uses two types of cookies: session cookies and persistent cookies. Session cookies are deleted from your computer when you close your browser, whereas persistent cookies remain stored on your computer until deleted or until they reach their expiration date. You may refuse to accept cookies by adjusting your browser settings. However, if you refuse to accept cookies, your website experience may be degraded. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you visit our website.

While some browsers allow users to use a “Do Not Track” setting, visitors to my529’s website should be aware that my529’s webpages do not honor such requests.

External links

my529’s website may contain links to external sites operated by third parties. my529 places these links on the website to provide more resources or, in some cases, to survey participants about the plan. We may also send emails that contain links to third-party surveys.

my529 is not responsible for these third-party sites or their content. The my529 website notifies users when they have selected a link to a third-party website. The users must then select “Proceed” to go to the thirdparty website. Once you leave my529’s website, we cannot be responsible for the protection and privacy of any information that you provide. You should exercise caution and look at the privacy policy of any websites you visit.

Children under the age of 13

my529’s website is not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on the my529 website or on or through any of its features and do not make any purchases through the website. If we learn we have collected or received personal information from the website from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have information from or about a child under 13, please contact us.

California residents

California Civil Code Section § 1798.83 permits users of the my529 website that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, you may contact us.

Contact us

If you have any questions or concerns regarding this privacy policy, please contact us at info@my529.org or by mail at:

my529
PO Box 145100
Salt Lake City, UT 84114-5100

Please note that email communications are not necessarily secure. Accordingly, you should not include credit card information or other sensitive information in your email correspondence to us.

Changes to this privacy policy

my529 reserves the right to change this privacy policy. Any changes to this privacy policy will become effective upon posting of the revised privacy policy on this website. If we make material changes to this privacy policy, we will notify you by means of a prominent notice on this website prior to the change becoming effective.

Last updated: September 2026

Find us on social media:

Important Legal Notice

Investing is an important decision. The investments in your account may vary with market conditions and could lose value. Carefully read the Program Description in its entirety for more information and consider all investment objectives, risks, charges and expenses before investing. For a copy of the Program Description, call 800.418.2551 or visit my529.org.

Account Value. Investments in my529 are not insured or guaranteed by my529, the Utah Board of Higher Education, the Utah Education Savings Board of Trustees, any other state or federal agency, or any third party. However, Federal Deposit Insurance Corporation (FDIC) insurance is provided for the FDIC-Insured investment option. In addition, my529 offers investment options that are partially insured for the portion of the respective investment option that includes FDIC-insured accounts as an underlying investment. Units in my529 have not been registered with the United States Securities and Exchange Commission or with any state securities commission.

FDIC insurance is subject to limits set by federal law. Click here for more information about FDIC Insurance.

Non-Utah Taxpayers and Residents. The state in which you or your beneficiary pay taxes or live may offer a 529 plan that provides state tax or other benefits, such as financial aid, scholarship funds, and protection from creditors, not otherwise available to you by investing in my529. You should consider such benefits, if any, before investing in my529.

Consult an advisor. my529 does not provide legal, financial, investment or tax advice, and the information provided on this website does not contain advice and cannot be construed as such or relied upon for those purposes. You should consult your own tax or legal advisor to determine the effect of federal and state tax laws on your particular situation.

Morningstar rating. A Morningstar Analyst Rating™ for a 529 college savings plan is not a credit or risk rating. Analyst ratings are subjective in nature and should not be used as the sole basis for investment decisions. Morningstar does not represent its analyst ratings to be guarantees. Please visit Morningstar.com for more information about the analyst ratings, as well as other Morningstar ratings and fund rankings.

my529 does not pay commissions, loads or sales charges to financial advisors nor does it endorse financial advisors.

Information on this website is believed to be accurate when posted and is qualified in its entirety by the Program Description.

Utah Educational Savings Plan®

UESP®

Utah Educational Savings Plan® and UESP® are registered service marks.