Utah Code § 63A-19-202: Governing board duties.

(1) The governing board shall:

(a) recommend changes to the state data privacy policy;

(b) hear issues raised by the ombudsperson regarding existing governmental entity privacy practices;

(c) evaluate and recommend the appropriate:

(i) structure and placement for the office within state government; and

(ii) authority to be granted to the office, including any authority to make rules; and

(d) recommend funding mechanisms and strategies for governmental entities to enable compliance with data privacy responsibilities, including:

(i) appropriations;

(ii) rates;

(iii) grants; and

(iv) internal service funds.

(2) In fulfilling the duties under this part, the governing board may receive and request input from:

(a) governmental entities;

(b) elected officials;

(c) subject matter experts; and

(d) other stakeholders.