63A-19-404. Retention and disposition of personal data.
(1) A governmental entity that collects personal data shall retain and dispose of the personal data in accordance with a documented record retention schedule.
(2) Compliance with Subsection (1) does not exempt a governmental entity from complying with other applicable laws or regulations related to retention or disposition of specific personal data held by that governmental entity.