Utah § 63A-19-401.2 Training requirements.

Utah Statutes

§ 63A-19-401.2 — Training requirements.

Utah § 63A-19-401.2

Title 63AUtah Government Operations Code

Ch. 63A-19Government Data Privacy Act

Part 63A-19-4Duties of Governmental Entities

This text of Utah § 63A-19-401.2 (Training requirements.) is published on Counsel Stack Legal Research, covering Utah primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook

Utah Code Ann. § 63A-19-401.2 (2026).

Text

(1)The data privacy training program created by the office under Section 63A-4-301 shall be:

(1)(a) designed to provide instruction regarding:

(1)(a)(i) data privacy best practices, obligations, and responsibilities; and

(1)(a)(ii) the relationship between privacy, records management, and security; and

(1)(b) required for all employees of a governmental entity who:

(1)(b)(i) have access to personal data as part of the employee's work duties; or

(1)(b)(ii) supervise an employee who has access to personal data.

(2)The training described in Subsection (1) shall be completed:

(2)(a) within 30 days after an employee of a governmental entity begins employment; and

(2)(b) at least once in each calendar year.

(3)A governmental entity is responsible for:

(3)(a) ensuring that each employee of the

Free access — add to your briefcase to read the full text and ask questions with AI

(1) The data privacy training program created by the office under Section 63A-4-301 shall be:
(1)(a) designed to provide instruction regarding:
(1)(a)(i) data privacy best practices, obligations, and responsibilities; and
(1)(a)(ii) the relationship between privacy, records management, and security; and
(1)(b) required for all employees of a governmental entity who:
(1)(b)(i) have access to personal data as part of the employee's work duties; or
(1)(b)(ii) supervise an employee who has access to personal data.
(2) The training described in Subsection (1) shall be completed:
(2)(a) within 30 days after an employee of a governmental entity begins employment; and
(2)(b) at least once in each calendar year.
(3) A governmental entity is responsible for:
(3)(a) ensuring that each employee of the governmental entity completes the data privacy training as required by Subsection (2); and
(3)(b) reporting the governmental entity's compliance with the training requirements as described in Section 63A-19-401.3.