Utah Code § 31A-8-404: Annual audit of internal quality control.

(1) Each organization shall prepare an annual report of the effectiveness of the organization's internal quality control.

(2) The annual report shall be:

(a) in a form the commissioner approves; and

(b) certified and signed by two officers of the organization.

(3) The commissioner may at any time require an audit of an organization's quality control system.

(4) The audit shall be performed by qualified persons designated by the commissioner.

(5) Auditors shall have full access to all records of the organization and the organization's providers, including medical records of individual patients.

(6) The information contained in the medical records of individual patients shall remain confidential, and information derived from those records may not be used in a manner that could directly or indirectly identify an individual.

(7) All information, interviews, reports, statements, memoranda, or other data furnished by reason of the audit and any findings or conclusions of the auditors are privileged and are not subject to discovery, use, or receipt in evidence in a legal proceeding except hearings before the commissioner concerning alleged violations of the provisions of this chapter.