Data Privacy Complaints

Privacy Logo

Data Privacy Complaint Summaries

Below you will find a summary of each complaint resolved by the Data Privacy Ombudspersons.                                                                                                                  

October
24

Security Protocols 26-03

This complaint is related to a government health lab that was the subject of a previous complaint. The original complainant was concerned about the disposal of lab samples containing personal data. In response to that
September
26

Request To Amend Or Correct A Record 26-04

The Complainant in this matter was concerned with the governmental entity’s denial ofthe Complainant’s requests to amend or correct a record. The first request to amend or correcta record specifically referenced Utah Code § 63G-2-603.
July
22

Request for Social Security Number 25-19

The Complainant in this matter was concerned that the governmental entity’s application foremployment requires an applicant to provide their Social Security Number (SS#). TheGovernment Data Privacy Act (GDPA) requires government entities to only “obtain and
July
22

No Privacy Notice on Survey Summary 25–16

The Complainant in this matter was concerned that the governmental entity sent out a survey,which requested or collected personal data, without a privacy notice. The Government DataPrivacy Act (GDPA) at Subsection 63A-19-402(1) requires a governmental
June
02

25-07 Lack of Privacy Notice

The Complainant in this matter was concerned that the contact form on the governmentalentity’s website did not include a privacy notice as required by the Government Data PrivacyAct (GDPA). Subsection 63A-19-402(1) requires a governmental entity
June
02

25-09 Disclosure of Records without GRAMA Request

The Complainant in this matter was concerned that their photo was released by aschool employee in August 2020 without complying with the requirements in the GovernmentRecords Access and Management Act (GRAMA). Subsection 63G-2-204(1)(a) provides that
May
14

25 – 04 Automatic License Plate Readers

The Complainant in this matter expressed concerns regarding the use of automatic licenseplate reader systems (ALPR) by two law enforcement agencies (LEAs). The Complainant wasalso concerned with the LEAs’ use, sharing, and retention of the
May
08

25-11 Privacy Investigator Licensing

The Complainant in this matter was concerned with the amount of personal data contained on their private investigator identification card. The personal data displayed on the identification card includes: The Complainant believed this was an
April
17

25-06 Age Verification Program

This complaint was related to several issues, the first was regarding the Age Verification Program which requires establishments licensed by the governmental entity to verify an individual’s age before the individual can enter a bar
April
03

25-05 GRAMA Denial

The complaint in this matter was related to a request for records made pursuant to the Government Records Access and Management Act (GRAMA). The original request was submitted through the governmental entity’s online records request
March
24

25 – 01 Health Lab

The complainant in this matter was concerned that a public health lab was improperlydisposing of samples that had labels attached containing personal data. When this issue firstcame to light, the governmental entity that supervised the
March
24

25 – 03 SAFEUT

A concern was raised regarding whether personal data provided to the SafeUT program wasbeing used for research purposes without consent. The SafeUT website states that the datacollected may be used for research purposes in accordance
December
19

2025 – 02 BallotTrax Program

A concern was raised regarding the privacy practices of the State’s BallotTrax program which allows Utah voters to sign up to receive alerts when their ballot is received and processed. To participate in the program