Utah § 63A-19-402 Personal data collection -- Privacy notice.

Utah Statutes

§ 63A-19-402 — Personal data collection -- Privacy notice.

Utah § 63A-19-402

Title 63AUtah Government Operations Code

Ch. 63A-19Government Data Privacy Act

Part 63A-19-4Duties of Governmental Entities

This text of Utah § 63A-19-402 (Personal data collection -- Privacy notice.) is published on Counsel Stack Legal Research, covering Utah primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook

Utah Code Ann. § 63A-19-402 (2026).

Text

(1)A governmental entity shall provide a privacy notice to an individual, or the legal guardian of an individual, from whom the governmental entity requests or collects personal data.

(2)If the personal data collected by a governmental entity:

(2)(a) would be classified as a public record under Section 63G-2-301, the privacy notice shall be limited to a statement indicating that the individual's personal data may be available to the public as provided by Section 63G-2-201; and

(2)(b) would not be classified as a public record under Section 63G-2-301, the privacy notice shall describe:

(2)(b)(i) all intended purposes and uses of the personal data;

(2)(b)(ii) the consequences for refusing to provide the personal data;

(2)(b)(iii) the classes of persons and governmental entities:

(2)(b)(iii

Free access — add to your briefcase to read the full text and ask questions with AI

(1) A governmental entity shall provide a privacy notice to an individual, or the legal guardian of an individual, from whom the governmental entity requests or collects personal data.
(2) If the personal data collected by a governmental entity:
(2)(a) would be classified as a public record under Section 63G-2-301, the privacy notice shall be limited to a statement indicating that the individual's personal data may be available to the public as provided by Section 63G-2-201; and
(2)(b) would not be classified as a public record under Section 63G-2-301, the privacy notice shall describe:
(2)(b)(i) all intended purposes and uses of the personal data;
(2)(b)(ii) the consequences for refusing to provide the personal data;
(2)(b)(iii) the classes of persons and governmental entities:
(2)(b)(iii)(A) with whom the governmental entity shares personal data; or
(2)(b)(iii)(B) to whom the governmental entity sells personal data; and
(2)(b)(iv) the record series in which the personal data is included.
(3) The governmental entity shall provide the privacy notice by:
(3)(a) posting the privacy notice in a prominent place where the governmental entity collects the personal data;
(3)(b) including the privacy notice as part of any document or form used by the governmental entity to collect the personal data; or
(3)(c) including as part of any document or form used by the governmental entity to collect personal data, a conspicuous link or QR code that links to an electronic version of the privacy notice.
(4) The privacy notice required by this section is in addition to, and does not supersede, any other notice requirement otherwise applicable to the governmental entity.
(5) (5)(a) Notwithstanding Subsections (1) through (4), a governmental entity may provide the privacy notice required under this section by posting the privacy notice on the governmental entity's government website, or on the public notice website if the governmental entity does not have a government website, when the privacy notice relates to processing activities that:
(5)(a)(i) serve a public safety interest; and
(5)(a)(ii) produce a public benefit that is greater than or equal to the potential impact on an individual's privacy interest that the privacy notice protects.
(5)(b) The processing activities related to public safety described in Subsection (5)(a) may include:
(5)(b)(i) the provision of emergency services;
(5)(b)(ii) law enforcement body or dash camera recordings;
(5)(b)(iii) security camera monitoring;
(5)(b)(iv) ambulance and emergency medical services; and
(5)(b)(v) 911 emergency communications.
(6) The governmental entity shall, upon request, provide the privacy notice to an individual, or the legal guardian of an individual, regarding personal data previously furnished by that individual.
(7) The governmental entity may only use personal data furnished by an individual for the purposes identified in the privacy notice provided to that individual.