Utah Code 63A-19-102. State data privacy policy
Current as of: 2024 | Check for updates
|
Other versions
It is the policy of Utah that:
(1) an individual has a fundamental interest in and inherent expectation of privacy regarding the personal data that the individual provides to a governmental entity;
Terms Used In Utah Code 63A-19-102
- Governmental entity: means the same as that term is defined in Section
63G-2-103 . See Utah Code 63A-19-101 - Individual: means the same as that term is defined in Section
63G-2-103 . See Utah Code 63A-19-101 - Personal data: means information that is linked or can be reasonably linked to an identified individual or an identifiable individual. See Utah Code 63A-19-101
- Process: means a writ or summons issued in the course of a judicial proceeding. See Utah Code 68-3-12.5
- processing: means any operation or set of operations performed on personal data, including collection, recording, organization, structuring, storage, adaptation, alteration, access, retrieval, consultation, use, disclosure by transmission, transfer, dissemination, alignment, combination, restriction, erasure, or destruction. See Utah Code 63A-19-101
- State: when applied to the different parts of the United States, includes a state, district, or territory of the United States. See Utah Code 68-3-12.5
(2) a governmental entity shall act in a manner respecting personal data provided to the governmental entity that is consistent with the interests and expectations described in Subsection (1);
(3) the state shall encourage innovation to enhance the ability of a governmental entity to:
(3)(a) protect the privacy of an individual’s personal data;
(3)(b) provide clear notice to an individual regarding the governmental entity’s processing of the individual’s personal data;
(3)(c) process personal data only for specified, lawful purposes and only process the minimum amount of an individual’s personal data necessary to achieve those purposes;
(3)(d) implement appropriate consent mechanisms regarding the uses of an individual’s personal data;
(3)(e) provide an individual with the ability to access, control, and request corrections to the individual’s personal data held by a governmental entity;
(3)(f) maintain appropriate safeguards to protect the confidentiality, integrity, and availability of personal data;
(3)(g) account for compliance with privacy related laws, rules, and regulations that are specific to a particular governmental entity, program, or personal data; and
(3)(h) meet a governmental entity’s and an individual’s business and service needs;
(4) the state shall promote training and education programs for employees of governmental entities focused on:
(4)(a) data privacy best practices, obligations, and responsibilities; and
(4)(b) the overlapping relationship with privacy, records management, and security; and
(5) the state shall promote consistent terminology in data privacy requirements across governmental entities.