Utah Code Title 63C. State Commissions and Councils Code § 63C-24-202. Commission duties

(a) annually develop a data privacy agenda that identifies for the upcoming year:

(b) develop guiding standards and best practices with respect to government privacy practices;

(c) develop educational and training materials that include information about:

(d) review the privacy implications and civil liberties concerns of government privacy practices; and

(e) provide the data privacy agenda to the governing board by May 1 of each year.

(a) review specific government privacy practices as referred to the commission by the chief privacy officer described in Section 63A-19-302 or the state privacy officer described in Section 67-3-13;

(b) review a privacy practice not accounted for in the data privacy agenda only upon referral by the chief privacy officer or the state privacy officer in accordance with Subsection 63C-24-202(2)(a);

(c) review and provide recommendations regarding consent mechanisms used by governmental entities to collect personal information;

(d) develop and provide recommendations to the Legislature on how to balance transparency and public access of public records against an individual's reasonable expectations of privacy and data protection; and

(e) develop recommendations for legislation regarding the guiding standards and best practices the commission has developed in accordance with Subsection (1)(a).

(a) the results of any reviews the commission has conducted;

(b) the guiding standards and best practices described in Subsection (1)(b); and

(c) any recommendations for legislation the commission has developed in accordance with Subsection (2)(e).

(a) governmental entity privacy practices the commission plans to review in the next year;

(b) any educational and training programs the commission intends to develop in relation to government data privacy best practices;

(c) results of the commission's data privacy practice reviews from the previous year; and

(d) recommendations from the commission related to data privacy legislation, standards, or best practices.