Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Data Privacy topic
No spam. Unsubscribe anytime.
Audit finds Davis County largely compliant with Government Data Privacy Act, flags new‑hire training documentation
Summary
Controller Scott Parke reported the county is in substantial compliance with the Government Data Privacy Act but auditors recommended stronger documentation verifying new‑hire attendance at mandated privacy training; Clerk Brian McKenzie said the two sampled employees were hired after the audit year and have since completed training.
At the March 10 work session, County Controller Scott Parke presented the results of the Government Data Privacy Act (GDPA) audit required by County Ordinance and included in Attachments B1–B4. Parke reported the County is in substantial compliance with the Act but recommended improved controls to verify completion of statutorily required privacy training for new hires.
Audit staff identified instances where two individuals departed orientation before the required training concluded, producing a documentation gap that could leave the County unable to demonstrate full compliance. Clerk Brian McKenzie clarified the two individuals sampled were hired after the audit year under review (2025) and that both have since completed the required training; he said HR and the Clerk’s Office have already coordinated procedural improvements to ensure documentation and follow‑up for any missed portions.
The audit’s recommended actions — now in management response documents — include enhanced attendance verification, a bi‑weekly HR hire/termination notice to the Clerk’s Office, changes to online orientation certification and reconciliation procedures. The Controller and Clerk recorded support for implementing these corrective steps.
