53H-15-305. Participating state agency access.
(1) In addition to performing data research and responding to data research requests under Section, the center shall maintain a program to support data collection, analysis, exchange, and for operational transactional purposes among participating state agencies to provide access to data to promote the improvement of public health, education, safety, and well-being of the state's citizenry and improvement of the overall efficiency of state agencies. 53H-15-303
(2) The director shall provide bi-annual updates to the advisory board about the program in Subsection. (1)
(3) The program described in Subsection: (1) may collect, store, and process personal data as allowed under state and federal law; shall include protections to prevent the unauthorized access, use, or redisclosure of personal data; and shall be considered a high-risk processing activity under Subsection. 63A-19-101(17)
(4) A participating state agency and the center shall include any contribution of personal data to the program described in Subsectionin the applicable personal data collection notice required under Section. (1) 63A-19-402
(5) A participating state agency that chooses to contribute personal data to the program described in Subsectionshall comply with: (1) guidelines established by the center; and applicable state and federal data privacy laws.
(6) In accordance with Title 63G, Chapter 3, Utah Administrative Rulemaking Act, the center may create rules to establish: procedures for submitting personal data under this section; procedures consistent with applicable federal and state data confidentiality and privacy provisions to prevent the unauthorized access, use, or redisclosure of personal data; and any additional requirements needed to administer this section.
(7) Before contributing personal data to the program described in Subsection, a participating state agency and the center shall enter into a written agreement that: (1) specifies the personal data that the participating state agency will share with the center; defines the purposes for which the center may use the personal data contributed by the participating state agency; and establishes timelines for disposing of personal data the participating state agency discloses when: the personal data is no longer needed for the program described in Subsection; or (1) required by state or federal law.
(8) The center may create a fee schedule in accordance with Sectionfor completing an operational transactional service. 63J-1-504
(9) Nothing in this section shall be construed as requiring an entity to provide personal data to the program described in Subsection. (1)
(10) The program described in Subsectionis not subject to Title 63G, Chapter 2, Government Records Access and Management Act. (1)