Newsroom

The Complainant in this matter expressed concerns regarding the use of automatic licenseplate reader systems (ALPR) by two law enforcement agencies (LEAs). The Complainant wasalso concerned with the LEAs’ use, sharing, and retention of the license plate data (Data)obtained from these ALPRs. Specifically, the Complainant was worried that the LEAs mayretain Data, either in databases that are currently in use

The Complainant in this matter was concerned with the amount of personal data contained on their private investigator identification card. The personal data displayed on the identification card includes: The Complainant believed this was an issue given that a licensee may face discipline for refusing to display the identification card to any person having reasonable cause to verify the validity

Stay in the Loop with the Utah Office of Data PrivacySubscribe to our mailing list and get notified by email whenever new content is published on privacy.utah.gov. Don’t miss out on updates, resources, and important announcements. You can find the mailing list at the bottom of the Home page.

This complaint was related to several issues, the first was regarding the Age Verification Program which requires establishments licensed by the governmental entity to verify an individual’s age before the individual can enter a bar or purchase alcohol. The Complainant was concerned that although the statute only requires a licensee to verify age if a patron appears to be 35

Under Utah law (Utah Code § 63A-19-402), government agencies have to let you—or your legal guardian—know when they’re asking for or collecting your personal information. We have posted a template that contains a format for simple processing and another for more complex processing. This template can be found under Tool and Resources.

New micro-trainings are available in Tools & Resources for Practice #7 Appointed Records Officer Training Practice #13 Minimum Data Necessary

In today’s digital government, data governance and privacy are no longer back-office functions — they are foundational to public trust, operational efficiency, and ethical service delivery. The Data Governance Summit brings together leaders from every level of government to align around a shared vision— protecting the privacy of Utahns while making data work better for them. Over a lifetime, individuals

The complaint in this matter was related to a request for records made pursuant to the Government Records Access and Management Act (GRAMA). The original request was submitted through the governmental entity’s online records request portal. In order to submit a request through this system, an individual must submit the information required by GRAMA in Subsection 63G-2-204(1)(a). This includes the

New micro-training available in Tools & Resources for

New micro-trainings are available in Tools & Resources for

Join the Utah Office of Data Privacy for a series of free workshops. Open to all government staff, offered monthly, lasting 60-90 minutes. Workshops are a great opportunity to enhance your knowledge and strengthen your data privacy practices. New workshops will be added over the next few months. View all workshops here.

The complainant in this matter was concerned that a public health lab was improperlydisposing of samples that had labels attached containing personal data. When this issue firstcame to light, the governmental entity that supervised the lab conducted a thorough review todetermine if personal data had been improperly disclosed to or accessed by any unauthorizedindividuals. A review was also conducted by

A concern was raised regarding whether personal data provided to the SafeUT program wasbeing used for research purposes without consent. The SafeUT website states that the datacollected may be used for research purposes in accordance with “institutional policies”. Areview of these policies revealed that consent is required in order to use any personal data forresearch purposes. A representative from the

Lana Taylor, the Data Privacy Ombudsperson, is at the Utah State Bar Convention today providing information about individual’s data privacy interests and how to file a data privacy complaint. If you are in the area, stop by the Office of Data Privacy to find out more.

H.B. 444 modifies provisions related to governmental data privacy and privacy oversight. A summary of this bill has been posted here and can also be found on the Tools and Resources page.

New micro-training for Practice #5 ‘Retention Schedule Proposal and Approval’ is available.

The ODP/DTS Privacy Impact Assessment (PIA) is now available to view as a PDF or for download as a Word doc. This is the PIA approved for use by governmental entities to identify, assess and mitigate risks to the Individuals for which they process personal information. Once privacy risks are identified, the governmental entity is directed to identify specific actions

If you feel your data privacy rights have been violated by a governmental entity, you may submit a complaint to the Data Privacy Ombudsperson. The Data Privacy Ombudsperson serves as a data privacy resource and may mediate data privacy disputes between individuals and governmental entities. A summary of the program has been posted to the website. 

The Utah Office of Data Privacy offers access to scanning and reporting tools to identify and remediate website tracking technologies on entity websites, such as cookies and tracking tags. Find out more on our Tools and Resources page.

The Office of Data Privacy has introduced a new feature on their homepage. Located at the bottom of the home screen, the “Recent Updates” section provides newly added content and important news from the office, aimed at assisting government entities in developing and enhancing their privacy programs.