The Government Data Privacy Act (GDPA) at Utah Code § 63A-19-301(5) allows the Utah Office of Data Privacy (Office) to grant a limited:
- extension of time to comply with certain requirements of Part 4, Duties of Governmental Entities; or
- exemption from complying with certain requirements of Part 4, Duties of Governmental Entities.
A governmental entity applying for an extension or exemption, must identify the specific duty from which the governmental entity seeks an extension or exemption and the section that imposes that duty. The governmental entity must also justify the requested extension or exemption.
If the Office grants an extension or exemption the Office must report to the Utah Privacy Governing Board:
- what governmental entity received an extension or exemption; and
- the nature of the exemption.
Instructions for requesting extension/exemption can be found here.