Data Privacy Complaints

The Complainant in this matter was concerned that the governmental entity’s application foremployment requires an applicant to provide their Social Security Number (SS#). TheGovernment Data Privacy Act (GDPA) requires government entities to only “obtain and

The Complainant in this matter was concerned that the governmental entity sent out a survey,which requested or collected personal data, without a privacy notice. The Government DataPrivacy Act (GDPA) at Subsection 63A-19-402(1) requires a governmental

The Complainant in this matter was concerned that the contact form on the governmentalentity’s website did not include a privacy notice as required by the Government Data PrivacyAct (GDPA). Subsection 63A-19-402(1) requires a governmental entity

The Complainant in this matter was concerned that their photo was released by aschool employee in August 2020 without complying with the requirements in the GovernmentRecords Access and Management Act (GRAMA). Subsection 63G-2-204(1)(a) provides that

The Complainant in this matter expressed concerns regarding the use of automatic licenseplate reader systems (ALPR) by two law enforcement agencies (LEAs). The Complainant wasalso concerned with the LEAs’ use, sharing, and retention of the

The Complainant in this matter was concerned with the amount of personal data contained on their private investigator identification card. The personal data displayed on the identification card includes: The Complainant believed this was an

This complaint was related to several issues, the first was regarding the Age Verification Program which requires establishments licensed by the governmental entity to verify an individual’s age before the individual can enter a bar

The complaint in this matter was related to a request for records made pursuant to the Government Records Access and Management Act (GRAMA). The original request was submitted through the governmental entity’s online records request

The complainant in this matter was concerned that a public health lab was improperlydisposing of samples that had labels attached containing personal data. When this issue firstcame to light, the governmental entity that supervised the

A concern was raised regarding whether personal data provided to the SafeUT program wasbeing used for research purposes without consent. The SafeUT website states that the datacollected may be used for research purposes in accordance

A concern was raised regarding the privacy practices of the State’s BallotTrax program which allows Utah voters to sign up to receive alerts when their ballot is received and processed. To participate in the program