Newsroom

REQUEST TO AMEND OR CORRECT A RECORD – Utah Code §§ 63A-19-403 & 63G-2-603 This template allows individuals to request corrections or amendments to their personal data or records held by a governmental entity. REQUEST FOR A PRIVACY NOTICE – Utah Code §§ 63A-19-402 & 63G-2-601 This template enables individuals to request details from a governmental entity about how their

The slideshow from the Privacy Impact Assessments virtual workshop is now available on the PIA Webpage. The slideshow from the Data Sharing virtual workshop is now available on the Record and Personal Data Sharing, Selling, or Purchasing webpage.

The slideshow from the Website Scanning virtual workshop is now available on the Website Notice webpage.

A new micro-training is available for Privacy Program Report. You can access that training on the practice webpage.

An updated version of the Privacy Program Framework is now available. Key changes include: You can access the updated framework, along with the individual pages for each privacy practice, on the Tools & Resources webpage.

Workshop Details This workshop walks participants through the annual requirement for governmental entities to submit a privacy program report by December 31. We’ll cover what the report must include, why it’s important, and how to use the ODP-provided template to make the process easier. Key takeaways: [Click here] to learn more and add this workshop to your calendar.

A new micro-training is available for Record and Data Sharing or Selling. You can access that training on the practice webpage.

Template 1 – Contracts that Involve Personal Data Utah Code § 63G-2-206(6) provides requirements and restrictions under which an entity may disclose records that contain personal data with contractors and private providers. Utah Code § 63A-19-401(4) includes new requirements for contractors who enter into or renew a contract to process personal data on behalf of a governmental entity. After May

The [Clarifying Roles] handout outlines the core responsibilities of data privacy, records management, and cybersecurity within governmental entities. It can be a valuable tool for advocating resource allocation by showing decision-makers the staffing, training, and technology needed to meet compliance obligations and reduce organizational risk. The information in this document is provided as a resource to assist governmental entities and

Workshop Details This interactive session is designed for governmental employees specializing in data privacy and records management. Participants will learn the legal requirements and best practices for sharing and disclosing personal data under Utah law. The workshop covers: – Legal authority for sharing records, including provisions under GRAMA and other state and federal laws. – Distinctions between internal or external

We are rolling out a new workshop titled: Individual’s Data Privacy Interests and Obligations of Governmental Entities Workshop DetailsThis workshop will discuss individuals’ fundamental interest in and inherent expectation of privacy regarding personal data that individuals provide to a governmental entity. It will also review the data privacy requirements for governmental entities found in the Government Data Privacy Act (GDPA),

Governmental entities are required to provide notice to an individual or the legal guardian of an individual, if the individual’s personal data is affected by a data breach in accordance with Utah Code § 63A-19-406. We have posted a Breach Notification Template to help guide you in these situations. [Click here] to learn more about this privacy practice.

The Utah Office of Data Privacy has prepared a US State Data Governance Law Tracker that compares privacy laws across all 50 states. The tracker highlights comprehensive governance requirements in areas such as:

The Privacy Program Report Template has been updated based on feedback received. Word and PDF versions are available under Privacy Program Links on the Tools and Resources webpage.

A new micro-training is available for Privacy Notice – Notice to Provider of Information. You can access that training on the practice webpage.

The slide deck used in the virtual workshop titled Privacy Program Overview has been added to the Privacy for Governmental Entities webpage. You can download a static copy of those slides here.

Workshop Details If you are responsible for a government website, it’s important to understand how your site collects, tracks, and shares personal information. Under Utah’s Government Data Privacy Act (GDPA), public websites must now clearly explain these practices to visitors. This free workshop will focus on privacy notices and how to scan your website to identify and disclose tools like cookies or

The Practice 9 Inventorying page has two new updates:

The authority links have been updated for privacy practices 1-21. You can find them by clicking on the individual practices located on Tools and Resources.

The slide deck used in the virtual workshop titled Chief Administrative Officer has been added to Practice 1. You can download a static copy of those slides here.