Office of Data Privacy

Utah Office of Data Privacy
The Utah Office of Data Privacy created in the Government Data Privacy Act, under the direction of the State’s Chief Privacy Officer, works with governmental entities to ensure they effectively protect the privacy interests and rights of individuals.
Overview of Our Statutory Duties and Activities
The Utah Office of Data Privacy performs a wide range of duties, which include:
- Privacy Framework: Creating and maintaining a privacy framework to assist governmental entities to implement effective and efficient privacy programs, practices, tools, and systems .
- Legislative Review: Analyzing privacy laws to identify gaps, resolve conflicts, and recommend improvements.
- Education and Training: Providing privacy training programs to governmental employees, emphasizing the interplay between privacy, security, and records management.
- Risk Monitoring: Identifying and monitoring high-risk data processing activities of governmental entities.
- Incident Response: Collaborating with the Cyber Center to establish an incident response plan for data breaches affecting governmental entities.
- Records Integration: Coordinating with the state archivist to align data privacy with records management practices.
- Public Empowerment: Enabling individuals to submit complaints about a governmental entity's data privacy practice to the Privacy Ombudsperson.
- Expert Assistance: Offering expertise and assistance to governmental entities for high risk data processing activities, as resources permit.
Our Mission
To promote privacy as a cornerstone of public trust by supporting governmental entities in protecting personal data, fostering transparency, and empowering individuals to maintain control over their information.
Our Scope
The Utah Office of Data Privacy serves state agencies and provides optional resources to assist local governments, including cities, counties, school districts, and public institutions of higher education. Our work spans a wide range of governmental entities and programs to ensure privacy protection is prioritized statewide.
Meet the Team

Chief Privacy Officer/Director of the Office of Data Privacy [email protected] (801) 884-8466
Christopher Bramwell
Christopher Bramwell is appointed by Governor Cox as Utah's Chief Privacy Officer and serves as the Director of the Office of Data Privacy, where he leads efforts to modernize privacy practices for governmental entities statewide. He worked closely with the legislature to create Utah's Government Data Privacy Act, a comprehensive data privacy law for all public entities in Utah. Christopher led the creation of Utah's Strategic Privacy Program Plan as required by Executive Order 2023-06, designed to assist public entities in initiating and maturing their privacy programs. He has a strong focus on modernizing government systems and processes in a manner that allows privacy to scale efficiently with fewer resources through digital verifiable credentials and non-judicial processes that empower individuals to access and assert their privacy rights effectively. Christopher completed his MBA at Idaho State University as part of the National Science Foundation CyberCorps program in the National Information Assurance Training and Education Center and holds a degree in political science from Brigham Young University.

Deputy Chief Privacy Officer [email protected] (385) 567-4701
Micah Vorwaller
Micah Vorwaller is an attorney specializing in information privacy and security and in healthcare law. He is currently the Deputy Chief Privacy Officer for the State of Utah and is working to establish comprehensive privacy laws and requirements for governmental entities in Utah to ensure that all Utahn's constitutional right to privacy in information gathered by governmental entities is protected.

Privacy Analyst [email protected] (385) 400-6988
Brian Nelson
Brian Nelson is a Privacy Analyst with the Office of Data Privacy. He loves helping people improve their privacy and data governance practices. He has spent the majority of his career in the public sector, gaining experiences in areas such as data analysis, operations, finance and project management. While privacy and government records management best-practices is his primary job function by day, Brian also enjoys volunteering in various local programs and travel.

Privacy Architect [email protected] (801) 884-8466
Denise Farnsworth
Denise is currently the Privacy Architect for the State of Utah within the Office of Data Privacy. Her previous roles included: Deputy Data Protection Officer for Facebook Ireland, Chief Privacy Officer and Senior Global Corporate Counsel for Jazz Pharmaceuticals, Senior Director and Privacy Officer, Lead Privacy Counsel for NetSuite, and Head of Legal, Data Privacy and Compliance Officer for Microsoft Ireland where she provided support for Microsoft’s European Development Centre, the Irish Subsidiary, Data Centre, and Microsoft’s Operations Centre for Europe, Middle East and Africa.

Training Director [email protected] (385) 977-4114
Shane Paul
Shane serves as the Training Director for the Office of Data Privacy. He has dedicated over 15 years to state government, working in multiple departments in various roles dealing with training, project management, software development and data privacy and security. Alongside studying data privacy, Shane enjoys running, kayaking, hosting local workshops on bonsai cultivation, yard selling and spending quality time with his wife and 3 daughters.

Data Privacy Ombudsperson
[email protected]
(801) 834-3121
Lana Taylor
Lana Taylor was appointed by Governor Cox as the Data Privacy Ombudsperson for the
State of Utah. In this role, she serves as a resource for individuals when concerns arise regarding
the data privacy practices of governmental entities. Her duties also include mediating data
privacy disputes between individuals and governmental entities. Before joining the Utah Office
of Data Privacy, Ms. Taylor worked as an Assistant Utah Attorney General and as a Deputy Salt
Lake District Attorney. Ms. Taylor received her Juris Doctorate from the S.J. Quinney College of
Law and her honors degree in political science from the University of Utah.
Our Mission
Guided by Utah's pioneering commitment to privacy and constitutional individual liberties, we assist Utah’s government entities by providing an infrastructure where Utah’s personal information is safeguarded. We design, develop, train and create awareness regarding our innovative, compliant, and transparent privacy program tools and resources.
Contact Us
Share your feedback questions & concerns here. You may also reach out to us directly at [email protected]