Centerville council adopts data privacy program; city recorder named program lead

The Centerville City Council voted 4-1 to adopt Resolution No. 2025-17, establishing a city data privacy program to comply with the Utah Government Data Privacy Act. The resolution designates the city recorder as the city’s chief administrative officer for the program and sets implementation dates and training requirements.

Staff explained the state legislature consolidated and clarified municipal obligations on data privacy and provided resources and training to help cities comply. Council members were briefed that the law requires municipalities to implement a privacy program, appoint records officers with annual certification requirements, and publicly report progress. The city must bring newly required processes into compliance immediately for new processing; existing processes have a compliance window through July 1, 2027.

Council discussion focused on whether the city recorder was the best official to lead the program, how the city would handle capacity for the additional workload and which definitions of “personal data” to use. Staff said the recorder is the recommended lead because the role already handles sensitive records; city management and legal will support the recorder and the mayor retains ultimate responsibility. The council amended resolution language to use the statute’s definitions and to change a proposed purpose sentence to refer specifically to “personal data and information.”

The resolution passed 4-1. Staff told council the state data-privacy office is providing a program framework, online training and other implementation help. The council directed staff to continue work on detailed chapters of the program—such as training requirements and disclosure checklists—and to report back as the program is implemented.