Bill > HB0450

This bill amends existing Utah laws concerning government data privacy and records management by introducing new provisions and modifying current ones. Key changes include requiring the redaction of phone numbers and street addresses from certain required reports before public disclosure, establishing a "chief privacy officer" role, and redefining the responsibilities of the Utah Privacy Commission and the Utah Office of Data Privacy. It also updates definitions related to personal data, data breaches, and high-risk processing activities, and clarifies requirements for governmental entities regarding data privacy programs, training, and reporting. The bill also revises procedures for data breach notifications, introduces a technology transparency study, and renumbers and amends sections related to private information for at-risk government employees and data privacy ombudspersons. Furthermore, it modifies the process for handling data privacy complaints and updates provisions within the Government Records Access and Management Act, including those related to public records, private records, and the use of controlled or private records. The bill also adjusts timelines for compliance and reporting, and clarifies the scope of liability for governmental entities and their employees regarding data disclosures.

Government Affairs, Justice

https://le.utah.gov/~2026/bills/static/HB0450.html