Utah Code 63A-19-402. General governmental privacy requirements — Personal data request notice
Current as of: 2024 | Check for updates
|
Other versions
(1) A governmental entity shall provide a personal data request notice to an individual, or the legal guardian of an individual, from whom the governmental entity requests or collects personal data.
Terms Used In Utah Code 63A-19-402
- Governmental entity: means the same as that term is defined in Section
63G-2-103 . See Utah Code 63A-19-101 - Individual: means the same as that term is defined in Section
63G-2-103 . See Utah Code 63A-19-101 - Legal guardian: means :(10)(a) the parent of a minor; or(10)(b) an individual appointed by a court to be the guardian of a minor or incapacitated person and given legal authority to make decisions regarding the person or property of the minor or incapacitated person. See Utah Code 63A-19-101
- Personal data: means information that is linked or can be reasonably linked to an identified individual or an identifiable individual. See Utah Code 63A-19-101
- Record: means the same as that term is defined in Section
63G-2-103 . See Utah Code 63A-19-101(2) The personal data request notice described in Subsection (1) shall include:(2)(a) the reasons the individual is asked to provide the personal data;(2)(b) the intended purposes and uses of the personal data;(2)(c) the consequences for refusing to provide the personal data;(2)(d) the classes of persons and entities that:(2)(d)(i) share the personal data with the governmental entity; or(2)(d)(ii) receive the personal data from the governmental entity on a regular or contractual basis; and(2)(e) the record series in which the personal data is or will be included, if applicable.(3) The governmental entity shall provide the personal data request notice by:(3)(a) posting the personal data request notice in a prominent place where the governmental entity collects the personal data;(3)(b) including the personal data request notice as part of any document or form used by the governmental entity to collect the personal data; or(3)(c) conspicuously linking to or displaying a QR code linked to an electronic version of the personal data request notice as part of any document or form used by the governmental entity to collect the personal data.(4) The personal data request notice required by this section is in addition to, and does not supersede, any other notice requirement otherwise applicable to the governmental entity.(5) The governmental entity shall, upon request, provide the personal data request notice to an individual, or the legal guardian of an individual, regarding personal data previously furnished by that individual.(6) The governmental entity may only use personal data furnished by an individual for the purposes identified in the personal data request notice provided to that individual.