AI-generated summary, not yet reviewed by Better Utah staff. Please consult the bill text.

Utah's system for overseeing how government agencies collect, use, and protect personal data would see significant changes under this bill, which restructures the Utah Privacy Commission to include representatives from state agencies, cities, counties, and public education, while shifting administrative support for that commission from the state auditor's office to the Utah Office of Data Privacy. The bill eliminates the standalone "state privacy auditor" position and transfers those responsibilities to the state auditor's office and a new "chief privacy officer" role, creates a formal complaint process allowing individuals to raise data privacy concerns and have them addressed by a newly established data privacy ombudsperson, and requires the office and commission to jointly study government use of passive data collection technologies (such as tracking tools) and report findings to lawmakers. It also expands individuals' rights to request corrections not just to their personal data but to other information government agencies hold about them, updates mandatory data privacy training requirements for government employees, adds new rules for how and when agencies must notify people after a data breach, and makes numerous technical adjustments to align related sections of Utah's records-access and data-privacy laws.