Utah Code Title 63A. Utah Government Operations Code § 63A-12-104. Rulemaking authority

(a) the state archivist may, for an executive branch agency, make rules establishing procedures for the collection, storage, designation, classification, access, mediation for records access, and management of records under this chapter and Title 63G, Chapter 2, Government Records Access and Management Act; and

(b) a department may make rules specifying at which level within the department the requirements described in this chapter will be undertaken.

(a) requirements for making an inventory of each record series that contains personal identifying information, including:

(b) a list of information, categories of information, or types of information expressly designated as personal identifying information, in accordance with the criteria described in Subsections 63A-12-100.5(2)(c)(i) through (iii);

(c) criteria, variables, and principles for determining whether information in a record series, not expressly designated under Subsection (2)(b), is personal identifying information;

(d) a list and description of categories or types of personal identifying information that are collected, maintained, or used by executive branch agencies; and

(e) requirements for the form, content, format, review, and update of a privacy annotation.