Privacy for Individuals

Right to Access Your Personal Data

You have the right to request access to your personal data that is in the possession of a governmental entity.GRAMAopens in a new tab, opens in a new tab, opens in a new tab describes how you can access your records held by a governmental entity in the State of Utah. You may request access to your personal data by:

• submitting a formal request using a formopens in a new tab, opens in a new tab, opens in a new tab provided by Archives or the governmental entity; or
• emailing the governmental entity directly with your name, mailing address, daytime telephone number, and a description of the record requested that identifies the record with reasonable specificity.

Upon receipt, the governmental entity will review your request and either provide you with the records requested or issue you a denial. If your request is denied, the governmental entity will provide you with a written explanation of the reason for the denial. You have a right to appeal the denial and may submit a request to appeal to the chief administrative officer.

Right to Amend or Correct Your Personal Data

You have the right to request that your personal data be amended or corrected by a governmental entity under the GDPAopens in a new tab, opens in a new tab, opens in a new tab and GRAMAopens in a new tab, opens in a new tab, opens in a new tab . You may contest the accuracy or completeness of your personal records by contacting the governmental entity directly. If your request is approved, the governmental entity will update the governmental entity’s relevant records. If your request is denied, you may submit a written statement contesting the information in the record. This statement will then be attached to the record.

Right to Receive a Privacy Notice when Personal Data is Collected

You have a right to receive a privacy notice under the GDPAopens in a new tab, opens in a new tab, opens in a new tab and GRAMAopens in a new tab, opens in a new tab, opens in a new tab when a governmental entity collects personal data from you. The privacy notice must include the:

• reasons you are asked to provide the personal data;
• intended purposes and uses of the personal data;
• consequences of not providing the personal data;
• classes of persons and entities that:
  • share the personal data with the governmental entity; or
  • receive the personal data from the governmental entity on a regular or contractual basis; and
• the record series in which the personal data.

In addition, you have a right to request a privacy notice for the personal data you previously provided to a governmental entity. You may exercise this right by contacting the governmental entity and requesting a copy of a privacy notice.

Right to an Explanation about your Personal Data

You also have a right to have a governmental entity explain the information contained in the privacy notice under GRAMAopens in a new tab, opens in a new tab, opens in a new tab . You may request an explanation by contacting the governmental entity.

Right to Restrict Access for At-Risk Employees

If you are an at-risk employee, you may submit a request to a governmental entity to have your personal information classified as a private record under GRAMA. An at-risk employee includes:

• peace officers;
• judges;
• prosecutors;
• members of the Board of Pardons;
• state or local government employees who, because of the unique nature of the employee's regular work assignments or because of one or more recent credible threats directed to or against the employee, would be at immediate and substantial risk of physical harm; and
• family members of at-risk-employees who live with the at-risk employee.