{"data":{"id":"us-ut/utah-code-63a-19-401.1","jurisdiction":"us-ut","citation":"Utah Code § 63A-19-401.1","heading":"Privacy annotations.","body":"(1)\n(a) Beginning July 1, 2027, a state agency shall make a complete and accurate privacy annotation for each record series containing personal data that the state agency collects, maintains, or uses.\n(b) After July 1, 2027, a state agency that has not completed a privacy annotation for a record series containing personal data, may not collect, maintain, or use the personal data in the record series.\n(2) If a state agency determines that a record series:\n(a) does not contain personal data, the privacy annotation shall be limited to a statement indicating that the record series does not include personal data; or\n(b) contains personal data, the privacy annotation shall include:\n(i) an inventory of all types of personal data included in the record series;\n(ii) a description of all purposes for which the state agency collects, keeps, or uses the personal data;\n(iii) a citation to the state agency's legal authority for collecting, keeping, or using the personal data; and\n(iv) any other information required by the rules created by the office under Section 63A-19-301.","path":["Title 63A Utah Government Operations Code","Chapter 63A-19 Government Data Privacy Act","Part 63A-19-4 Duties of Governmental Entities"],"source_url":"https://le.utah.gov/xcode/Title63A/Chapter19/63A-19-S401.1.html","current_through":"2026 General Session","vintage":"","retrieved_at":"2026-09-03T11:34:33Z","sha256":"d10be6756604ca9528643223a6e7045c4346111630fb0a23c02742854a81ac8f","source_id":"us-ut","stale":false,"prev":"us-ut/utah-code-63a-19-401","next":"us-ut/utah-code-63a-19-401.2"},"notice":"GroundRules: Original legal text. Not legal advice."}