Newsroom

Legislative Update Stay informed on the latest developments in Utah’s public-sector privacy law. This virtual workshop provides a practical overview of how H.B. 450 (Utah Data Privacy Amendments, 2026) modifies the Utah Government Data Privacy Act (GDPA) Participants will learn: This session is designed for government staff, privacy professionals, legal teams, and policymakers who need a concise update on the

Utah Data Governance Summit – May 21 Data governance in Utah has moved beyond policy. The focus now is implementation—turning law and frameworks into consistent, measurable practices embedded in daily government operations. The Utah Data Governance Summit brings together state and local leaders and implementers to focus on how privacy, transparency, and responsible data use are put into practice across

The slideshow from the Records Management virtual workshop is now available on the practice webpage.

All templates are being updated with a new, consistent design. The revised format has now been applied to Request for a Notice, Request to Amend or Correct a Record, and Request by At-Risk Employees for Restricting Access

The slideshow from the Incident Response virtual workshop is now available on the practice webpage.

All templates are being updated with a new, consistent design. The revised format has now been applied to Breach Notification, Website Privacy Notice, and Privacy Notice for Collection of Personal Data.

Records Management Join us for an entry-level virtual workshop on Records Management designed for governmental entities. Participants will learn how to operationalize privacy law and manage records throughout the data lifecycle. This session is tailored for Records Officers and Chief Administrative Officers (CAOs) and focuses on meeting statutory obligations under GRAMA and GDPA. Topics include identifying record series, establishing approved

Incident Response This workshop provides governmental entities with a foundational understanding of their statutory obligations regarding data breaches. Participants will learn to identify what constitutes a breach under Utah law and navigate the requirements for notifying both affected individuals and state authorities. By attending, you’ll learn how to: See more events and add this workshop to your calendar.

The Privacy Program Framework has been updated. Updates include:

The Privacy Program Report Template has been updated. Updates include:

The new virtual workshop schedule is now posted. We will continue with the more popular workshops along with two new offerings: Note View more events.

REQUEST TO AMEND OR CORRECT A RECORD – Utah Code §§ 63A-19-403 & 63G-2-603 This template allows individuals to request corrections or amendments to their personal data or records held by a governmental entity. REQUEST FOR A PRIVACY NOTICE – Utah Code §§ 63A-19-402 & 63G-2-601 This template enables individuals to request details from a governmental entity about how their

The slideshow from the Privacy Impact Assessments virtual workshop is now available on the PIA Webpage. The slideshow from the Data Sharing virtual workshop is now available on the Record and Personal Data Sharing, Selling, or Purchasing webpage.

The slideshow from the Website Scanning virtual workshop is now available on the Website Notice webpage.

A new micro-training is available for Privacy Program Report. You can access that training on the practice webpage.

An updated version of the Privacy Program Framework is now available. Key changes include: You can access the updated framework, along with the individual pages for each privacy practice, on the Tools & Resources webpage.

Workshop Details This workshop walks participants through the annual requirement for governmental entities to submit a privacy program report by December 31. We’ll cover what the report must include, why it’s important, and how to use the ODP-provided template to make the process easier. Key takeaways: See more events and add this workshop to your calendar.

A new micro-training is available for Record and Data Sharing or Selling. You can access that training on the practice webpage.

Template 1 – Contracts that Involve Personal Data Utah Code § 63G-2-206(6) provides requirements and restrictions under which an entity may disclose records that contain personal data with contractors and private providers. Utah Code § 63A-19-401(4) includes new requirements for contractors who enter into or renew a contract to process personal data on behalf of a governmental entity. After May

The [Clarifying Roles] handout outlines the core responsibilities of data privacy, records management, and cybersecurity within governmental entities. It can be a valuable tool for advocating resource allocation by showing decision-makers the staffing, training, and technology needed to meet compliance obligations and reduce organizational risk. The information in this document is provided as a resource to assist governmental entities and