Newsroom

Governmental entities are required to provide notice to an individual or the legal guardian of an individual, if the individual’s personal data is affected by a data breach in accordance with Utah Code § 63A-19-406. We have posted a Breach Notification Template to help guide you in these situations. [Click here] to learn more about this privacy practice.

The Utah Office of Data Privacy has prepared a US State Data Governance Law Tracker that compares privacy laws across all 50 states. The tracker highlights comprehensive governance requirements in areas such as:

The Privacy Program Report Template has been updated based on feedback received. Word and PDF versions are available under Privacy Program Links on the Tools and Resources webpage.

A new micro-training is available for Privacy Notice – Notice to Provider of Information. You can access that training on the practice webpage.

The slide deck used in the virtual workshop titled Privacy Program Overview has been added to the Privacy for Governmental Entities webpage. You can download a static copy of those slides here.

Workshop Details If you are responsible for a government website, it’s important to understand how your site collects, tracks, and shares personal information. Under Utah’s Government Data Privacy Act (GDPA), public websites must now clearly explain these practices to visitors. This free workshop will focus on privacy notices and how to scan your website to identify and disclose tools like cookies or

The Practice 9 Inventorying page has two new updates:

The authority links have been updated for privacy practices 1-21. You can find them by clicking on the individual practices located on Tools and Resources.

The slide deck used in the virtual workshop titled Chief Administrative Officer has been added to Practice 1. You can download a static copy of those slides here.

An updated SCORM file has been added for the 2025 Privacy Awareness Training. The video has been added to the Department of Government Operations YouTube channel and can be streamed from the Practice 8 webpage.  State Agencies: A copy of the 2025 Privacy Awareness Training has been added to KnowBe4. Please contact your KnowBe4 administrator to have them initiate a training campaign. The course can be

A preliminary DRAFT of the Privacy Program Report Template has been added to the Privacy Program Links under Tools and Resources. Note: This version has not yet been finalized by the Utah Office of Data Privacy. It is provided for review and comment purposes only. The Office welcomes and encourages public and stakeholder feedback to inform the finalization of this

The Privacy Impact Assessment (PIA) has been updated. There are two notable changes: Access the PIA on Privacy for Government or Tools & Resources under Privacy Program Links.

New micro-trainings are available in Tools & Resources for:

We have added a new icon to our Privacy Program Links for ‘Privacy Awareness Training‘ Privacy Awareness Training links previously located under Tools & Resources are now available in Practice #8 – Statewide Privacy Awareness Training

An updated SCORM file has been added for the Privacy Awareness Training. The new file includes: Downloadable links can be found on the Practice 8 webpage

We’ve implemented an automated response for individuals who join the Utah Office of Data Privacy mailing list. Additionally, instructions for unsubscribing have been included in our Notice of Collection. Both the mailing list information and the Notice of Collection are available at the bottom of our homepage.

The Utah Office of Data Privacy has formally partnered with the Gary R. Herbert Institute for Public Policy to support its statutory responsibilities. This partnership includes co-hosting data governance workshops and summits, as well as conducting academic research that informs whitepapers used by ODP. Find out more on our Tools and Resources webpage.

The 2025 Data Privacy Awareness Training will be a short 8 minute video. This should be viewed by all employees of a governmental entity who: Training shall be completed: Links for local governments to access the statewide Data Privacy Awareness Training have been added to the Tools and Resources page. This includes download files for MP4, MOV, and a Transcript

Workshop Details This workshop provides a practical introduction to conducting Privacy Impact Assessments (PIAs) for government entities. You’ll learn how to use the PIA as a tool to identify privacy risks, determine the impact on individuals, and outline safeguards to reduce those risks. The content aligns with Utah’s Privacy Program Framework and supports compliance with GDPA, GRAMA, and DARS. The

We have updated the icons for our Privacy Program Links and added a placeholder for the upcoming Privacy Program Report (Coming Soon).