63G-2-202.  Access to private, controlled, and protected documents.

(1)  Except as provided in Subsection (11)(a), a governmental entity:

Terms Used In Utah Code 63G-2-202

  • Controlled record: means a record containing data on individuals that is controlled as provided by Section 63G-2-304. See Utah Code 63G-2-103
  • Evidence: Information presented in testimony or in documents that is used to persuade the fact finder (judge or jury) to decide the case for one side or the other.
  • Governmental entity: means :
(i) executive department agencies of the state, the offices of the governor, lieutenant governor, state auditor, attorney general, and state treasurer, the Board of Pardons and Parole, the Board of Examiners, the National Guard, the Career Service Review Office, the State Board of Education, the Utah Board of Higher Education, and the State Archives;
(ii) the Office of the Legislative Auditor General, Office of the Legislative Fiscal Analyst, Office of Legislative Research and General Counsel, the Legislature, and legislative committees, except any political party, group, caucus, or rules or sifting committee of the Legislature;
(iii) courts, the Judicial Council, the Administrative Office of the Courts, and similar administrative units in the judicial branch;
(iv) any state-funded institution of higher education or public education; or
(v) any political subdivision of the state, but, if a political subdivision has adopted an ordinance or a policy relating to information practices pursuant to Section 63G-2-701, this chapter shall apply to the political subdivision to the extent specified in Section 63G-2-701 or as specified in any other section of this chapter that specifically refers to political subdivisions. See Utah Code 63G-2-103
  • Guardian: A person legally empowered and charged with the duty of taking care of and managing the property of another person who because of age, intellect, or health, is incapable of managing his (her) own affairs.
  • Guardian: includes a person who:Utah Code 68-3-12.5
  • Indemnification: In general, a collateral contract or assurance under which one person agrees to secure another person against either anticipated financial losses or potential adverse legal consequences. Source: FDIC
  • Individual: means a human being. See Utah Code 63G-2-103
  • Jurisdiction: (1) The legal authority of a court to hear and decide a case. Concurrent jurisdiction exists when two courts have simultaneous responsibility for the same case. (2) The geographic area over which the court has authority to decide cases.
  • Person: means :
    (a) an individual;
    (b) a nonprofit or profit corporation;
    (c) a partnership;
    (d) a sole proprietorship;
    (e) other type of business organization; or
    (f) any combination acting in concert with one another. See Utah Code 63G-2-103
  • Power of attorney: A written instrument which authorizes one person to act as another's agent or attorney. The power of attorney may be for a definite, specific act, or it may be general in nature. The terms of the written power of attorney may specify when it will expire. If not, the power of attorney usually expires when the person granting it dies. Source: OCC
  • Private record: means a record containing data on individuals that is private as provided by Section 63G-2-302. See Utah Code 63G-2-103
  • Protected record: means a record that is classified protected as provided by Section 63G-2-305. See Utah Code 63G-2-103
  • Record: means a book, letter, document, paper, map, plan, photograph, film, card, tape, recording, electronic data, or other documentary material regardless of physical form or characteristics:
    (i) that is prepared, owned, received, or retained by a governmental entity or political subdivision; and
    (ii) where all of the information in the original is reproducible by photocopy or other mechanical or electronic means. See Utah Code 63G-2-103
  • State: when applied to the different parts of the United States, includes a state, district, or territory of the United States. See Utah Code 68-3-12.5
  • State Records Committee: means the State Records Committee created in Section 63G-2-501. See Utah Code 63G-2-103
  • Statute: A law passed by a legislature.
  • Subpoena: A command to a witness to appear and give testimony.
  • United States: includes each state, district, and territory of the United States of America. See Utah Code 68-3-12.5
  • (a)  shall, upon request, disclose a private record to:

    (i)  the subject of the record;

    (ii)  the parent or legal guardian of an unemancipated minor who is the subject of the record;

    (iii)  the legal guardian of a legally incapacitated individual who is the subject of the record;

    (iv)  any other individual who:

    (A)  has a power of attorney from the subject of the record;

    (B)  submits a notarized release from the subject of the record or the individual’s legal representative dated no more than 90 days before the date the request is made; or

    (C)  if the record is a medical record described in Subsection 63G-2-302(1)(b), is a health care provider, as defined in Section 26B-8-501, if releasing the record or information in the record is consistent with normal professional practice and medical ethics; or

    (v)  any person to whom the record must be provided pursuant to:

    (A)  court order as provided in Subsection (7); or

    (B)  a legislative subpoena as provided in Title 36, Chapter 14, Legislative Subpoena Powers; and

    (b)  may disclose a private record described in Subsections 63G-2-302(1)(j) through (m), without complying with Section 63G-2-206, to another governmental entity for a purpose related to:

    (i)  voter registration; or

    (ii)  the administration of an election.
  • (2) 

    (a)  Upon request, a governmental entity shall disclose a controlled record to:

    (i)  a physician, physician assistant, psychologist, certified social worker, insurance provider or producer, or a government public health agency upon submission of:

    (A)  a release from the subject of the record that is dated no more than 90 days prior to the date the request is made; and

    (B)  a signed acknowledgment of the terms of disclosure of controlled information as provided by Subsection (2)(b); and

    (ii)  any person to whom the record must be disclosed pursuant to:

    (A)  a court order as provided in Subsection (7); or

    (B)  a legislative subpoena as provided in Title 36, Chapter 14, Legislative Subpoena Powers.

    (b)  A person who receives a record from a governmental entity in accordance with Subsection (2)(a)(i) may not disclose controlled information from that record to any person, including the subject of the record.

    (3)  If there is more than one subject of a private or controlled record, the portion of the record that pertains to another subject shall be segregated from the portion that the requester is entitled to inspect.

    (4)  Upon request, and except as provided in Subsection (11)(b), a governmental entity shall disclose a protected record to:

    (a)  the person that submitted the record;

    (b)  any other individual who:

    (i)  has a power of attorney from all persons, governmental entities, or political subdivisions whose interests were sought to be protected by the protected classification; or

    (ii)  submits a notarized release from all persons, governmental entities, or political subdivisions whose interests were sought to be protected by the protected classification or from their legal representatives dated no more than 90 days prior to the date the request is made;

    (c)  any person to whom the record must be provided pursuant to:

    (i)  a court order as provided in Subsection (7); or

    (ii)  a legislative subpoena as provided in Title 36, Chapter 14, Legislative Subpoena Powers; or

    (d)  the owner of a mobile home park, subject to the conditions of Subsection 41-1a-116(5).

    (5)  Except as provided in Subsection (1)(b), a governmental entity may disclose a private, controlled, or protected record to another governmental entity, political subdivision, state, the United States, or a foreign government only as provided by Section 63G-2-206.

    (6)  Before releasing a private, controlled, or protected record, the governmental entity shall obtain evidence of the requester’s identity.

    (7)  A governmental entity shall disclose a record pursuant to the terms of a court order signed by a judge from a court of competent jurisdiction, provided that:

    (a)  the record deals with a matter in controversy over which the court has jurisdiction;

    (b)  the court has considered the merits of the request for access to the record;

    (c)  the court has considered and, where appropriate, limited the requester’s use and further disclosure of the record in order to protect:

    (i)  privacy interests in the case of private or controlled records;

    (ii)  business confidentiality interests in the case of records protected under Subsection 63G-2-305(1), (2), (40)(a)(ii), or (40)(a)(vi); and

    (iii)  privacy interests or the public interest in the case of other protected records;

    (d)  to the extent the record is properly classified private, controlled, or protected, the interests favoring access, considering limitations thereon, are greater than or equal to the interests favoring restriction of access; and

    (e)  where access is restricted by a rule, statute, or regulation referred to in Subsection 63G-2-201(3)(b), the court has authority independent of this chapter to order disclosure.

    (8) 

    (a)  Except as provided in Subsection (8)(d), a governmental entity may disclose or authorize disclosure of private or controlled records for research purposes if the governmental entity:

    (i)  determines that the research purpose cannot reasonably be accomplished without use or disclosure of the information to the researcher in individually identifiable form;

    (ii)  determines that:

    (A)  the proposed research is bona fide; and

    (B)  the value of the research is greater than or equal to the infringement upon personal privacy;

    (iii) 

    (A)  requires the researcher to assure the integrity, confidentiality, and security of the records; and

    (B)  requires the removal or destruction of the individual identifiers associated with the records as soon as the purpose of the research project has been accomplished;

    (iv)  prohibits the researcher from:

    (A)  disclosing the record in individually identifiable form, except as provided in Subsection (8)(b); or

    (B)  using the record for purposes other than the research approved by the governmental entity; and

    (v)  secures from the researcher a written statement of the researcher’s understanding of and agreement to the conditions of this Subsection (8) and the researcher’s understanding that violation of the terms of this Subsection (8) may subject the researcher to criminal prosecution under Section 63G-2-801.

    (b)  A researcher may disclose a record in individually identifiable form if the record is disclosed for the purpose of auditing or evaluating the research program and no subsequent use or disclosure of the record in individually identifiable form will be made by the auditor or evaluator except as provided by this section.

    (c)  A governmental entity may require indemnification as a condition of permitting research under this Subsection (8).

    (d)  A governmental entity may not disclose or authorize disclosure of a private record for research purposes as described in this Subsection (8) if the private record is a record described in Subsection 63G-2-302(1)(w).

    (9) 

    (a)  Under Subsections 63G-2-201(5)(b) and 63G-2-401(6), a governmental entity may disclose to persons other than those specified in this section records that are:

    (i)  private under Section 63G-2-302; or

    (ii)  protected under Section 63G-2-305, subject to Section 63G-2-309 if a claim for business confidentiality has been made under Section 63G-2-309.

    (b)  Under Subsection 63G-2-403(11)(b), the State Records Committee may require the disclosure to persons other than those specified in this section of records that are:

    (i)  private under Section 63G-2-302;

    (ii)  controlled under Section 63G-2-304; or

    (iii)  protected under Section 63G-2-305, subject to Section 63G-2-309 if a claim for business confidentiality has been made under Section 63G-2-309.

    (c)  Under Subsection 63G-2-404(7), the court may require the disclosure of records that are private under Section 63G-2-302, controlled under Section 63G-2-304, or protected under Section 63G-2-305 to persons other than those specified in this section.

    (10) 

    (a)  A private record described in Subsection 63G-2-302(2)(f) may only be disclosed as provided in Subsection (1)(a)(v).

    (b)  A protected record described in Subsection 63G-2-305(43) may only be disclosed as provided in Subsection (4)(c) or Section 26B-6-212.

    (11) 

    (a)  A private, protected, or controlled record described in Section 26B-1-506 shall be disclosed as required under:

    (i)  Subsections 26B-1-506(1)(b), (2), and (4)(c); and

    (ii)  Subsections 26B-1-507(1) and (6).

    (b)  A record disclosed under Subsection (11)(a) shall retain its character as private, protected, or controlled.

    Amended by Chapter 329, 2023 General Session