(1) In addition to performing data research and responding to data research requests under Section 53H-15-303, the center shall maintain a program to support data collection, analysis, exchange, and for operational transactional purposes among participating state agencies to provide access to data to promote the improvement of public health, education, safety, and well-being of the state's citizenry and improvement of the overall efficiency of state agencies. (2) The director shall provide bi-annual updates to the advisory board about the program in Subsection (1). (3) The program described in Subsection (1): (a) may collect, store, and process personal data as allowed under state and federal law; (b) shall include protections to prevent the unauthorized access, use, or redisclosure of personal data; and (c) shall be considered a high-risk processing activity under Subsection 63A-19-101(17). (4) A participating state agency and the center shall include any contribution of personal data to the program described in Subsection (1) in the applicable personal data collection notice required under Section 63A-19-402. (5) A participating state agency that chooses to contribute personal data to the program described in Subsection (1) shall comply with: (a) guidelines established by the center; and (b) applicable state and federal data privacy laws. (6) In accordance with Title 63G, Chapter 3, Utah Administrative Rulemaking Act, the center may create rules to establish: (a) procedures for submitting personal data under this section; (b) procedures consistent with applicable federal and state data confidentiality and privacy provisions to prevent the unauthorized access, use, or redisclosure of personal data; and (c) any additional requirements needed to administer this section. (7) Before contributing personal data to the program described in Subsection (1), a participating state agency and the center shall enter into a written agreement that: (a) specifies the personal data that the participating state agency will share with the center; (b) defines the purposes for which the center may use the personal data contributed by the participating state agency; and (c) establishes timelines for disposing of personal data the participating state agency discloses when: (i) the personal data is no longer needed for the program described in Subsection (1); or (ii) required by state or federal law. (8) The center may create a fee schedule in accordance with Section 63J-1-504 for completing an operational transactional service. (9) Nothing in this section shall be construed as requiring an entity to provide personal data to the program described in Subsection (1). (10) The program described in Subsection (1) is not subject to Title 63G, Chapter 2, Government Records Access and Management Act. Repealed and Re-enacted by Chapter 355, 2026 General Session
‹ Prev All Utah sections Next ›
Lexace provides legal information, not legal advice, and no attorney–client relationship is created. Statute text is provided for general information and may not reflect the most recent amendments; verify against the official state code.