Lifetime Citizen Portal Access — AI Briefings, Alerts & Unlimited Follows
Town hears state Government Data Privacy Act briefing; deadline set for privacy report
Loading...
Summary
Spencer Foster of MAG briefed the Daniel Town Council on Utah’s Government Data Privacy Act (passed 2024), saying the only mandated step for 2025 is filing a privacy program report by Dec. 31, 2025, and recommending the mayor be named CAO and the records officer handle the data‑inventory work and annual staff training.
Spencer Foster, a local administrative advisor with the Mountainland Association of Governments, told the Daniel Town Council on Sept. 8 that Utah’s Government Data Privacy Act passed in 2024 and requires towns to be more transparent about what personal data they collect and how they use it. “This law… is dealing with how government agencies handle personal data,” Foster said, and he emphasized that the immediate requirement for 2025 is filing a privacy program report.
Foster said the report requires the town to list what types of personal data it collects, who is responsible for the program, and how data are stored and shared. He recommended appointing a chief administrative officer (CAO) to oversee the program and a records officer to manage records and secure GRAMA certification. Foster said, “You have to fill out a privacy program report. That is the only thing in the statute that it says you have to do” before Dec. 31, 2025.
Why it matters: the law creates new reporting and eventual policy and training obligations for local governments. Foster urged best practices — limit data collection to what is needed, avoid selling data unless legally authorized, complete a data inventory, and train all staff (including council and planning commission members) who handle personal data once a year. He offered templates, links to the state data-privacy office, and free local assistance funded by the state.
Council members asked for clarification on the deadline and training. Foster replied the short, state-produced privacy-awareness video (about eight minutes) can be used to document the town’s training percentage in the report. He offered to send templates and resources to the town clerk (Mary) and to follow up with support.
Next steps: Council members and staff were advised to identify the CAO and records officer, run a data inventory, distribute the state training video to relevant personnel, and complete the privacy program report and submit it by Dec. 31, 2025.