Newsroom

Workshop Details Join us for a 45–60 minute virtual workshop exploring AI governance for governmental entities. The session will introduce a draft AI governance Policy and examine how organizations can establish clear guidelines, roles, and safeguards for the responsible use of AI. Participants will review key policy provisions, discuss practical implementation considerations, and have an opportunity to ask questions and

Workshop Details Once you have identified your privacy obligations and established your governance structures, the next challenge is deciding which practice to tackle first. This session moves beyond the “compliance checklist” to strategic prioritization for the coming year. We’ll share a simple, step-by-step method to evaluate risks based on data sensitivity and citizen impact, then show you how to balance

Workshop Details This workshop walks participants through the annual requirement for governmental entities to submit a privacy program report by December 31. We’ll cover what the report must include, why it’s important, and how to use the ODP-provided template to make the process easier. Key takeaways: See more events and add this workshop to your calendar.

Building your privacy program just got easier. We’ve added a new Template Collection download to the training site. Instead of downloading files individually, you can now download them all at once in a single ZIP file. The collection includes helpful templates in a variety of formats, including Word, Excel, and PDF, giving you the tools you need to build and

Privacy practices define required capabilities. Internal controls operationalize them. Maturity models measure effectiveness and maturation strategies drive continuous improvement. Maturity models help organizations evaluate how effectively controls support privacy practices, identify gaps, and measure progress over time. Unlike policy adoption, maturity measures consistency, reliability, and institutional integration, showing not just whether a practice exists, but how well it works. Example

As part of our ongoing commitment to strengthening data privacy across state government, the Utah Office of Data Privacy (ODP) is excited to announce the launch of our Certified Information Privacy Manager (CIPM) Professional Development Fellowship. In the past, ODP has fully prepaid for IAPP training and certification exams. However, to ensure maximum stewardship of our finite budget and to

The Government Data Privacy Act (GDPA) at Utah Code § 63A-19-301(5) allows the Utah Office of Data Privacy (Office) to grant a limited: A governmental entity applying for an extension or exemption, must identify the specific duty from which the governmental entity seeks an extension or exemption and the section that imposes that duty. The governmental entity must also justify the requested extension

New Virtual Event: Data Governance Models When: June 11 @ 1:00 pm – 2:30 pm Data Governance Models: Building Transparency, Privacy, and Compliance into Everyday Government Operations Join the State’s Chief Privacy Officer and Data Privacy Ombuds for this interactive event where we will discuss a practical approach to data governance built around the services government entities provide every day. Rather

An updated style has been applied to all existing templates, along with incorporating HB 450 changes into the following templates: You may access these templates on our Tools and Resources page or by clicking here.

New Topic: Privacy Exchange This is a monthly virtual workshop focused on collaboration, discussion, and continuous improvement. This open forum gives governmental entities a chance to ask questions, provide feedback on existing resources, suggest updates or new materials, and share ideas with peers. Whether you want to review current guidance, recommend changes, or help shape future tools and trainings, this

Introducing a new template: Data Governance Ordinance This resource was designed to help political subdivisions quickly establish a clear, compliant foundation for responsible data governance. Built around core privacy principles and aligned with GDPA, GRAMA, and DARSMGS, this template helps you formalize how personal data is collected, used, protected, and managed, without starting from scratch. Access the ordinance template on

New Topic: Securing Leadership Buy-In This practical training equips you with the tools to secure leadership buy-in for privacy initiatives, without slowing the business down. You’ll learn how to move from perceived blocker to strategic partner and gain lasting executive support. Learning Objectives: Suitable for: Chief Administrative Officers, Records Officers, and or Privacy/Compliance professionals responsible for building and advancing privacy

New Topic: Responding to Data Privacy Complaints Learn how to confidently manage and respond to data privacy complaints. This session covers recent legislative updates, how to find and designate your Chief Administrative Officer (CAO), creating record series and retention schedules, documenting correspondence, logging complaints, and mediation of data privacy disputes. We’ll also walk through common use cases, followed by a

Following numerous requests to expand our weekly workshop curriculum, the Utah Office of Data Privacy is excited to announce its latest training initiative: New Topic. New Topic is an extension of the Utah Office of Data Privacy’s weekly workshop series, designed to deliver on-demand sessions focused on emerging and high interest privacy topics. These workshops are introduced as needs arise and

Privacy.utah.gov is being updated to reflect Utah’s evolving privacy landscape. You’ll start to see updated visuals, improved navigation, and a refreshed set of program links on the Tools & Resources page, making it faster and easier to find what you need. These updates also align with changes introduced by House Bill 450. Updated language reflecting the law will be added

2026 Legislative Update We held our first Legislative workshop on Tuesday. If you missed the live session, you can access the presentation slides here or join us for our final workshop on April 9 at 2 PM [register here] Workshop Details: Stay informed on the latest developments in Utah’s public-sector privacy law. This virtual workshop provides a practical overview of how H.B. 450 (Utah Data Privacy

Legislative Update Stay informed on the latest developments in Utah’s public-sector privacy law. This virtual workshop provides a practical overview of how H.B. 450 (Utah Data Privacy Amendments, 2026) modifies the Utah Government Data Privacy Act (GDPA) Participants will learn: This session is designed for government staff, privacy professionals, legal teams, and policymakers who need a concise update on the

Utah Data Governance Summit – May 21 Data governance in Utah has moved beyond policy. The focus now is implementation—turning law and frameworks into consistent, measurable practices embedded in daily government operations. The Utah Data Governance Summit brings together state and local leaders and implementers to focus on how privacy, transparency, and responsible data use are put into practice across

The slideshow from the Records Management virtual workshop is now available on the practice webpage.

All templates are being updated with a new, consistent design. The revised format has now been applied to Request for a Notice, Request to Amend or Correct a Record, and Request by At-Risk Employees for Restricting Access