{"data":{"id":"us-ut/utah-code-63a-19-401","jurisdiction":"us-ut","citation":"Utah Code § 63A-19-401","heading":"Duties of governmental entities.","body":"(1)\n(a) Except as provided in Subsections (1)(b) and (c), a governmental entity shall comply with the requirements of this part.\n(b) If a more specific or more restrictive law governs the treatment of a type of personal data, the more specific or more restrictive law shall control.\n(c) A governmental entity that is exempt under Section 63G-2-702, 63G-2-703, or 63G-2-704 from complying with the requirements in Title 63G, Chapter 2, Part 6, Collection of Information and Accuracy of Records, is exempt from complying with the requirements in this chapter.\n(2)\n(a) A governmental entity shall:\n(i) initiate a data privacy program before December 31, 2025;\n(ii) obtain and process only the minimum amount of personal data reasonably necessary to efficiently achieve a specified purpose;\n(iii) meet the requirements of this part for all new processing activities implemented by a governmental entity; and\n(iv) for any processing activity implemented before May 7, 2025, as soon as is reasonably practicable, but no later than July 1, 2027:\n(A) identify any non-compliant processing activity;\n(B) prepare a strategy for bringing the non-compliant processing activity into compliance with this part; and\n(C) include the information described in Subsections (2)(a)(iv)(A) and (B) in the privacy program report described in Section 63A-19-401.3.\n(b) A governmental entity that fulfills the reporting requirement under Section 63A-19-401.3 satisfies the requirement to initiate a privacy program under Subsection (2)(a)(i).\n(3) A governmental entity may not:\n(a) establish, maintain, or use undisclosed or covert surveillance of individuals unless permitted by law;\n(b) sell personal data unless expressly required by law; and\n(c) share personal data unless permitted by law.","path":["Title 63A Utah Government Operations Code","Chapter 63A-19 Government Data Privacy Act","Part 63A-19-4 Duties of Governmental Entities"],"source_url":"https://le.utah.gov/xcode/Title63A/Chapter19/63A-19-S401.html","current_through":"2026 General Session","vintage":"","retrieved_at":"2026-09-03T11:34:33Z","sha256":"15c3090b62dbd4417eb2c059b43d06abdd015e828adedd5d940d2ff7b175a743","source_id":"us-ut","stale":false,"prev":"us-ut/utah-code-63a-19-302","next":"us-ut/utah-code-63a-19-401.1"},"notice":"GroundRules: Original legal text. Not legal advice."}