Bill > HB0444

This bill establishes comprehensive updates to Utah's data privacy laws, focusing on how governmental entities collect, manage, use, and protect personal data. The bill creates new frameworks for data privacy practices, including requirements for governmental entities to establish privacy programs, provide privacy notices to individuals, and maintain transparency about how personal data is collected and used. Key provisions include mandating that governmental entities initiate a data privacy program by December 31, 2025, collect only the minimum amount of personal data necessary, and provide clear notices to individuals about how their data will be used. The bill establishes a Utah Privacy Commission, creates a Data Privacy Ombudsperson role, and introduces requirements for governmental websites to disclose their data collection practices. Notably, the bill requires governmental entities to provide privacy notices, limit personal data collection, implement data protection measures, and allows for potential disciplinary action against employees who intentionally violate data privacy regulations. The legislation aims to balance governmental data needs with individual privacy rights, providing more robust protections and transparency for Utah residents' personal information.