{"data":{"id":"us-ut/utah-code-63a-19-401.3","jurisdiction":"us-ut","citation":"Utah Code § 63A-19-401.3","heading":"Privacy program report.","body":"(1) On or before December 31 of each year, the chief administrative officer of each governmental entity shall prepare a report that includes:\n(a) how the governmental entity has initiated the governmental entity's privacy program;\n(b) a description of:\n(i) the governmental entity's privacy program including privacy practices;\n(ii) strategies for improving and maturing the governmental entity's privacy program and practices; and\n(iii) the governmental entity's high-risk processing activities;\n(c) a list of the types of personal data the governmental entity currently shares, sells, or purchases;\n(d) the legal basis for sharing, selling, or purchasing personal data;\n(e) the category of individuals or entities:\n(i) with whom the governmental entity shares personal data;\n(ii) to whom the governmental entity sells personal data; or\n(iii) from whom the governmental entity purchases personal data;\n(f) the percentage of the governmental entity's employees required to complete the data privacy training under Section 63A-19-401.2 that have completed the training; and\n(g) a description of any non-compliant processing activities identified under Subsection 63A-19-401(2)(a)(iv) and the governmental entity's strategy for bringing those activities into compliance with this part.\n(2) The report described in Subsection (1) shall be:\n(a) considered a protected record under Section 63G-2-305;\n(b) shared with the office, in accordance with Section 63G-2-206, on or before December 31 each year; and\n(c) retained by the governmental entity for no less than five years.","path":["Title 63A Utah Government Operations Code","Chapter 63A-19 Government Data Privacy Act","Part 63A-19-4 Duties of Governmental Entities"],"source_url":"https://le.utah.gov/xcode/Title63A/Chapter19/63A-19-S401.3.html","current_through":"2026 General Session","vintage":"","retrieved_at":"2026-09-03T11:34:33Z","sha256":"ec2a296339fe6e34e0dbd6e43a26fa591cb55f3816c680fd7808680115d627bf","source_id":"us-ut","stale":false,"prev":"us-ut/utah-code-63a-19-401.2","next":"us-ut/utah-code-63a-19-401.4"},"notice":"GroundRules: Original legal text. Not legal advice."}