Bill > HB0450

This bill amends existing Utah laws concerning government data privacy and records management, primarily by updating definitions and procedures related to personal data protection and disclosure. Key changes include redefining "at-risk government employee" to align with new section references, clarifying what constitutes "personal information" for such employees, and updating the requirements for governmental entities to establish data privacy programs and conduct privacy impact assessments. The bill also modifies provisions related to data breach notifications, including the definition of a data breach and the entities responsible for notification, and introduces new requirements for governmental entities using advanced technologies like facial recognition systems and cell site simulators, mandating public authorization and oversight. Furthermore, it adjusts the composition and duties of the Utah Privacy Commission and the Utah Office of Data Privacy, streamlines reporting requirements for governmental entities, and clarifies the process for individuals to request amendments to their personal data held by government agencies. The bill also enacts new provisions regarding "truth in surveillance" technologies, requiring governmental entities to obtain legislative approval and provide public notice before implementing them, and establishes a new section for "at-risk government employees" that consolidates and clarifies existing protections.

https://le.utah.gov/~2026/bills/static/HB0450.html