§ 80-2-1001 — Management Information System -- Contents -- Classification of records -- Access.

(1) The division shall develop and implement a Management Information System that meets the requirements of this section and the requirements of federal law and regulation.
(2) The Management Information System shall:
(2)(a) contain all key elements of each family's current child and family plan, including:
(2)(a)(i) the dates and number of times the plan has been administratively or judicially reviewed;
(2)(a)(ii) the number of times the parent failed the child and family plan; and
(2)(a)(iii) the exact length of time the child and family plan has been in effect; and
(2)(b) alert child welfare caseworkers regarding deadlines for completion of and compliance with policy, including child and family plans.
(3) For a child welfare case, the Management Information System shall provide each child welfare caseworker and the Division of Licensing and Background Checks created in Section 26B-2-103, exclusively for the purposes of foster parent licensure and monitoring, with a complete history of each child in the child welfare caseworker's caseload, including:
(3)(a) a record of all past action taken by the division with regard to the child and the child's siblings;
(3)(b) the complete case history and all reports and information in the control or keeping of the division regarding the child and the child's siblings;
(3)(c) the number of times the child has been in the protective custody, temporary custody, and custody of the division;
(3)(d) the cumulative period of time the child has been in the custody of the division;
(3)(e) a record of all reports of abuse or neglect received by the division with regard to the child's parent or guardian including:
(3)(e)(i) for each report, documentation of the:
(3)(e)(i)(A) latest status; or
(3)(e)(i)(B) final outcome or determination; and
(3)(e)(ii) information that indicates whether each report was found to be:
(3)(e)(ii)(A) supported;
(3)(e)(ii)(B) unsupported;
(3)(e)(ii)(C) substantiated;
(3)(e)(ii)(D) unsubstantiated; or
(3)(e)(ii)(E) without merit;
(3)(f) the number of times the child's parent failed any child and family plan; and
(3)(g) the number of different child welfare caseworkers who have been assigned to the child in the past.
(4) For child protective services cases, the Management Information System shall:
(4)(a) monitor the compliance of each case with:
(4)(a)(i) division rule;
(4)(a)(ii) state law; and
(4)(a)(iii) federal law and regulation; and
(4)(b) include the age and date of birth of the alleged perpetrator at the time the abuse or neglect is alleged to have occurred, in order to ensure accuracy regarding the identification of the alleged perpetrator.
(5) Information or a record contained in the Management Information System is:
(5)(a) a private, controlled, or protected record under Title 63G, Chapter 2, Government Records Access and Management Act; and
(5)(b) available only:
(5)(b)(i) to a person or government entity with statutory authorization under Title 63G, Chapter 2, Government Records Access and Management Act, to review the information or record;
(5)(b)(ii) to a person who has specific statutory authorization to access the information or record for the purpose of assisting the state with state or federal requirements to maintain information solely for the purpose of protecting minors and providing services to families in need;
(5)(b)(iii) to the extent required by Title IV(b) or IV(e) of the Social Security Act:
(5)(b)(iii)(A) to comply with abuse and neglect registry checks requested by other states; or
(5)(b)(iii)(B) to the United States Department of Health and Human Services for purposes of maintaining an electronic national registry of supported or substantiated cases of abuse and neglect;
(5)(b)(iv) to the department, upon the approval of the executive director of the department, on a need-to-know basis;
(5)(b)(v) as provided in Subsection (6) or Section 80-2-1002; or
(5)(b)(vi) to a citizen review panel for the purpose of fulfilling the panel's duties as described in Section 80-2-1101.
(6) (6)(a) The division may allow a division contract provider, court clerk designated by the Administrative Office of the Courts, the Office of Guardian Ad Litem, or Indian tribe to have limited access to the Management Information System.
(6)(b) A division contract provider or Indian tribe has access only to information about a person who is currently receiving services from the specific contract provider or Indian tribe.
(6)(c) A court clerk may only have access to information necessary to comply with Subsection 78B-7-202(2).
(6)(d) (6)(d)(i) The Office of Guardian Ad Litem may only access:
(6)(d)(i)(A) the information that is entered into the Management Information System on or after July 1, 2004, and relates to a child or family where the Office of Guardian Ad Litem is appointed by a court to represent the interests of the child; or
(6)(d)(i)(B) any abuse or neglect referral about a child or family where the office has been appointed by a court to represent the interests of the child, regardless of the date that the information is entered into the Management Information System.
(6)(d)(ii) The division may use the information in the Management Information System to screen an individual as described in Subsection 80-2-1002(4)(b)(ii)(A) at the request of the Office of Guardian Ad Litem.
(6)(e) A contract provider or designated representative of the Office of Guardian Ad Litem or an Indian tribe who requests access to information contained in the Management Information System shall:
(6)(e)(i) take all necessary precautions to safeguard the security of the information contained in the Management Information System;
(6)(e)(ii) train its employees regarding:
(6)(e)(ii)(A) requirements for protecting the information contained in the Management Information System under this chapter and under Title 63G, Chapter 2, Government Records Access and Management Act; and
(6)(e)(ii)(B) the criminal penalties under Sections 63G-2-801 and 80-2-1005 for improper release of information; and
(6)(e)(iii) monitor its employees to ensure that the employees protect the information contained in the Management Information System as required by law.
(7) The division shall take:
(7)(a) all necessary precautions, including password protection and other appropriate and available technological techniques, to prevent unauthorized access to or release of information contained in the Management Information System; and
(7)(b) reasonable precautions to ensure that the division's contract providers comply with Subsection (6).

Legislative History

Amended by Chapter 240, 2024 General Session