Newsroom

2026 Legislative Update We held our first Legislative workshop on Tuesday. If you missed the live session, you can access the presentation slides here or join us for our final workshop on April 9 at 2 PM [register here] Workshop Details: Stay informed on the latest developments in Utah’s public-sector privacy law. This virtual workshop provides a practical overview of how H.B. 450 (Utah Data Privacy

State-Endorsed Digital Identity The State-Endorsed Digital Identity (SEDI) Summit convenes state leaders committed to shaping the future of digital identity as trusted public infrastructure. Digital identity is rapidly becoming foundational to commerce, public services, fraud prevention, and online safety. The defining question for states is whether we will lead in shaping this infrastructure according to constitutional principles, or whether external

Legislative Update Stay informed on the latest developments in Utah’s public-sector privacy law. This virtual workshop provides a practical overview of how H.B. 450 (Utah Data Privacy Amendments, 2026) modifies the Utah Government Data Privacy Act (GDPA) Participants will learn: This session is designed for government staff, privacy professionals, legal teams, and policymakers who need a concise update on the

Utah Data Governance Summit – May 21 Data governance in Utah has moved beyond policy. The focus now is implementation—turning law and frameworks into consistent, measurable practices embedded in daily government operations. The Utah Data Governance Summit brings together state and local leaders and implementers to focus on how privacy, transparency, and responsible data use are put into practice across

The slideshow from the Records Management virtual workshop is now available on the practice webpage.

All templates are being updated with a new, consistent design. The revised format has now been applied to Request for a Notice, Request to Amend or Correct a Record, and Request by At-Risk Employees for Restricting Access

The slideshow from the Incident Response virtual workshop is now available on the practice webpage.

All templates are being updated with a new, consistent design. The revised format has now been applied to Breach Notification, Website Privacy Notice, and Privacy Notice for Collection of Personal Data.

Records Management Join us for an entry-level virtual workshop on Records Management designed for governmental entities. Participants will learn how to operationalize privacy law and manage records throughout the data lifecycle. This session is tailored for Records Officers and Chief Administrative Officers (CAOs) and focuses on meeting statutory obligations under GRAMA and GDPA. Topics include identifying record series, establishing approved

Incident Response This workshop provides governmental entities with a foundational understanding of their statutory obligations regarding data breaches. Participants will learn to identify what constitutes a breach under Utah law and navigate the requirements for notifying both affected individuals and state authorities. By attending, you’ll learn how to: See more events and add this workshop to your calendar.

The Privacy Program Framework has been updated. Updates include:

The Privacy Program Report Template has been updated. Updates include:

The new virtual workshop schedule is now posted. We will continue with the more popular workshops along with two new offerings: Note View more events.

This complaint is related to a government health lab that was the subject of a previous complaint. The original complainant was concerned about the disposal of lab samples containing personal data. In response to that complaint the lab revised its internal policies and adopted strict procedures for the staff to follow when disposing of samples. The complainant in this matter

REQUEST TO AMEND OR CORRECT A RECORD – Utah Code §§ 63A-19-403 & 63G-2-603 This template allows individuals to request corrections or amendments to their personal data or records held by a governmental entity. REQUEST FOR A PRIVACY NOTICE – Utah Code §§ 63A-19-402 & 63G-2-601 This template enables individuals to request details from a governmental entity about how their

The slideshow from the Privacy Impact Assessments virtual workshop is now available on the PIA Webpage. The slideshow from the Data Sharing virtual workshop is now available on the Record and Personal Data Sharing, Selling, or Purchasing webpage.

A link for the DTS Cyber Security Incident Response Plan Procedure has been added to privacy practice Pro – 3 webpage. Document highlights include:

The Complainant in this matter was concerned with the governmental entity’s denial ofthe Complainant’s requests to amend or correct a record. The first request to amend or correcta record specifically referenced Utah Code § 63G-2-603. The governmental entity denied therequest under Utah Code § 63G-2-204(1)(a)(ii) because it did not “identify a record”. TheComplainant sent a second request to amend or

The slideshow from the Website Scanning virtual workshop is now available on the Website Notice webpage.

A new micro-training is available for Privacy Program Report. You can access that training on the practice webpage.