Summary

Governmental entities are required to perform “privacy annotations'' for each record series that contains personal data pursuant to Utah Code § 63A-12-115 and additional requirements that will be provided via administrative rulemaking. The annotation is a process that is meant to ensure that entities track, by record series, the legal authority under which they process personal data, the purposes and uses for the personal data, and the types of personal data that may be processed in a specific record series to ensure proper risk management occurs.