State privacy office gives Utah cities a compliance roadmap, templates and a May 1, 2025 deadline

Shane Paul, training director at the State of UtahOffice of Data Privacy, told municipal officials in a Utah League of Cities and Towns webinar that cities must adopt a documented privacy program by May 1, 2025, under the Government Data Privacy Act and that the state will provide templates, trainings and case-by-case assistance to help small jurisdictions comply.

The Office of Data Privacy has published a framework built from statutory requirements and organized into 21 baseline privacy practices and a maturity model. "It's really just you guys deciding where you're at on this privacy roadmap," Paul said, describing how a jurisdiction can meet the May 1 deadline by documenting current maturity, setting priorities and adopting a short-term strategy. He added that "it's gonna be a multiyear effort for sure," and that the initial enforcement posture will be limited if entities show a documented plan to progress toward compliance.

Why this matters: The Government Data Privacy Act creates a new baseline for how government entities handle personal information and requires…