UT HB0450

Summary of Utah H.B. 450 - Data Privacy Amendments

• Restructures the Utah Privacy Commission to include up to 14 members with new representatives from state agencies, cities, counties, and public education, and transfers administrative support from the state auditor's office to the Utah Office of Data Privacy.

• Establishes a data privacy ombudsperson within the Office of Data Privacy to mediate disputes between individuals and governmental entities regarding data privacy complaints, and creates a formal complaint process requiring individuals to first submit complaints to the relevant governmental entity's chief administrative officer.

• Requires a joint study on passive data collection technology by the Office of Data Privacy and the Privacy Commission, with findings and recommendations due to the Government Operations Interim Committee by November 2027.

• Expands amendment and correction procedures to allow individuals to request corrections not only to personal data but also to other information concerning identifiable individuals maintained by governmental entities.

• Eliminates the separate state privacy auditor position and consolidates privacy auditing responsibilities under the state auditor's office, while authorizing the Office of Data Privacy to partner with state higher education institutions for research and support functions.