Bill Summary – FastDemocracy

LEGISLATIVE GENERAL COUNSEL                                               H.B. 349
Approved for Filing: T.R. Vaughn 6
         6 01-19-24 11:35 AM 6
                      PERSONAL IDENTIFYING INFORMATION IN
                                   GOVERNMENT RECORDS
                                      2024 GENERAL SESSION
                                          STATE OF UTAH
                             Chief Sponsor: Judy Weeks Rohner
                                 Senate Sponsor: ____________
 7
 LONG TITLE
 General Description:
        This bill amends provisions of the Government Records Access and Management Act
 to limit and govern the disclosure of personal identifying information.
 Highlighted Provisions:
        This bill:
        < defines personal identifying information;
        < except to the extent expressly provided in this bill, prohibits the disclosure of
 personal identifying information;
        < requires a governmental entity to provide notice when personal identifying
 information is, under certain circumstances, disclosed to a health care provider;
        < classifies a record that contains personal identifying information as a private record;
        < makes it a class A misdemeanor to intentionally and unlawfully disclose, or obtain
 access to, personal identifying information; and
        < makes technical and conforming changes.
 Money Appropriated in this Bill:
        None
                                                                                                        H.B. 349
 Other Special Clauses:
        None
 Utah Code Sections Affected:
     *HB0349*
       H.B. 349                                                               01-19-24 11:35 AM
 AMENDS:
        63G-2-103, as last amended by Laws of Utah 2023, Chapters 16, 173, 231, and 516
        63G-2-201, as last amended by Laws of Utah 2023, Chapters 173, 516
        63G-2-202, as last amended by Laws of Utah 2023, Chapter 329
        63G-2-302, as last amended by Laws of Utah 2023, Chapters 329, 471
        63G-2-306, as renumbered and amended by Laws of Utah 2008, Chapter 382
        63G-2-309, as last amended by Laws of Utah 2023, Chapter 516
        63G-2-401, as last amended by Laws of Utah 2019, Chapters 254, 334
        63G-2-403, as last amended by Laws of Utah 2019, Chapter 254
        63G-2-404, as last amended by Laws of Utah 2023, Chapter 516
        63G-2-801, as last amended by Laws of Utah 2019, Chapter 254
 ENACTS:
        63G-2-201.5, Utah Code Annotated 1953
41
 Be it enacted by the Legislature of the state of Utah:
        Section 1. Section 63G-2-103 is amended to read:
        63G-2-103. Definitions.
        As used in this chapter:
        (1) "Audit" means:
        (a) a systematic examination of financial, management, program, and related records
 for the purpose of determining the fair presentation of financial statements, adequacy of
 internal controls, or compliance with laws and regulations; or
        (b) a systematic examination of program procedures and operations for the purpose of
 determining their effectiveness, economy, efficiency, and compliance with statutes and
 regulations.
        (2) "Chronological logs" mean the regular and customary summary records of law
 enforcement agencies and other public safety agencies that show:
        (a) the time and general nature of police, fire, and paramedic calls made to the agency;
 and
        (b) any arrests or jail bookings made by the agency.
        (3) "Classification," "classify," and their derivative forms mean determining whether a
                                                     -2-
       01-19-24 11:35 AM                                                                        H.B. 349
 record series, record, or information within a record is public, private, controlled, protected, or
 exempt from disclosure under Subsection 63G-2-201(3)(b).
        (4) (a) "Computer program" means:
        (i) a series of instructions or statements that permit the functioning of a computer
 system in a manner designed to provide storage, retrieval, and manipulation of data from the
 computer system; and
        (ii) any associated documentation and source material that explain how to operate the
 computer program.
        (b) "Computer program" does not mean:
        (i) the original data, including numbers, text, voice, graphics, and images;
        (ii) analysis, compilation, and other manipulated forms of the original data produced by
 use of the program; or
        (iii) the mathematical or statistical formulas, excluding the underlying mathematical
 algorithms contained in the program, that would be used if the manipulated forms of the
 original data were to be produced manually.
        (5) (a) "Contractor" means:
        (i) any person who contracts with a governmental entity to provide goods or services
 directly to a governmental entity; or
        (ii) any private, nonprofit organization that receives funds from a governmental entity.
        (b) "Contractor" does not mean a private provider.
        (6) "Controlled record" means a record containing data on individuals that is controlled
 as provided by Section 63G-2-304.
        (7) "Designation," "designate," and their derivative forms mean indicating, based on a
 governmental entity's familiarity with a record series or based on a governmental entity's
 review of a reasonable sample of a record series, the primary classification that a majority of
 records in a record series would be given if classified and the classification that other records
 typically present in the record series would be given if classified.
        (8) "Elected official" means each person elected to a state office, county office,
 municipal office, school board or school district office, special district office, or special service
 district office, but does not include judges.
        (9) "Explosive" means a chemical compound, device, or mixture:
                                                      -3-
        H.B. 349                                                                   01-19-24 11:35 AM
         (a) commonly used or intended for the purpose of producing an explosion; and
         (b) that contains oxidizing or combustive units or other ingredients in proportions,
 quantities, or packing so that:
         (i) an ignition by fire, friction, concussion, percussion, or detonator of any part of the
 compound or mixture may cause a sudden generation of highly heated gases; and
         (ii) the resultant gaseous pressures are capable of:
         (A) producing destructive effects on contiguous objects; or
         (B) causing death or serious bodily injury.
         (10) "Government audit agency" means any governmental entity that conducts an audit.
         (11) (a) "Governmental entity" means:
         (i) executive department agencies of the state, the offices of the governor, lieutenant
 governor, state auditor, attorney general, and state treasurer, the Board of Pardons and Parole,
 the Board of Examiners, the National Guard, the Career Service Review Office, the State
 Board of Education, the Utah Board of Higher Education, and the State Archives;
         (ii) the Office of the Legislative Auditor General, Office of the Legislative Fiscal
 Analyst, Office of Legislative Research and General Counsel, the Legislature, and legislative
 committees, except any political party, group, caucus, or rules or sifting committee of the
 Legislature;
         (iii) courts, the Judicial Council, the Administrative Office of the Courts, and similar
 administrative units in the judicial branch;
         (iv) any state-funded institution of higher education or public education; or
         (v) any political subdivision of the state, but, if a political subdivision has adopted an
 ordinance or a policy relating to information practices pursuant to Section 63G-2-701, this
 chapter shall apply to the political subdivision to the extent specified in Section 63G-2-701 or
 as specified in any other section of this chapter that specifically refers to political subdivisions.
         (b) "Governmental entity" [also means] includes:
         (i) every office, agency, board, bureau, committee, department, advisory board, or
 commission of an entity listed in Subsection (11)(a) that is funded or established by the
 government to carry out the public's business;
         (ii) as defined in Section 11-13-103, an interlocal entity or joint or cooperative
 undertaking;
                                                       -4-
        01-19-24 11:35 AM                                                                        H.B. 349
        (iii) as defined in Section 11-13a-102, a governmental nonprofit corporation;
        (iv) an association as defined in Section 53G-7-1101;
        (v) the Utah Independent Redistricting Commission; and
        (vi) a law enforcement agency, as defined in Section 53-1-102, that employs one or
 more law enforcement officers, as defined in Section 53-13-103.
        (c) "Governmental entity" does not include the Utah Educational Savings Plan created
 in Section 53B-8a-103.
        (12) "Gross compensation" means every form of remuneration payable for a given
 period to an individual for services provided including salaries, commissions, vacation pay,
 severance pay, bonuses, and any board, rent, housing, lodging, payments in kind, and any
 similar benefit received from the individual's employer.
        (13) "Individual" means a human being.
        (14) (a) "Initial contact report" means an initial written or recorded report, however
 titled, prepared by peace officers engaged in public patrol or response duties describing official
 actions initially taken in response to either a public complaint about or the discovery of an
 apparent violation of law, which report may describe:
        (i) the date, time, location, and nature of the complaint, the incident, or offense;
        (ii) names of victims;
        (iii) the nature or general scope of the agency's initial actions taken in response to the
 incident;
        (iv) the general nature of any injuries or estimate of damages sustained in the incident;
        (v) the name, address, and other identifying information about any person arrested or
 charged in connection with the incident; or
        (vi) the identity of the public safety personnel, except undercover personnel, or
 prosecuting attorney involved in responding to the initial incident.
        (b) Initial contact reports do not include follow-up or investigative reports prepared
 after the initial contact report. However, if the information specified in Subsection (14)(a)
 appears in follow-up or investigative reports, it may only be treated confidentially if it is
 private, controlled, protected, or exempt from disclosure under Subsection 63G-2-201(3)(b).
        (c) Initial contact reports do not include accident reports, as that term is described in
 Title 41, Chapter 6a, Part 4, Accident Responsibilities.
                                                       -5-
        H.B. 349                                                                 01-19-24 11:35 AM
        (15) "Legislative body" means the Legislature.
        (16) "Notice of compliance" means a statement confirming that a governmental entity
 has complied with an order of the State Records Committee.
        (17) "Person" means:
        (a) an individual;
        (b) a nonprofit or profit corporation;
        (c) a partnership;
        (d) a sole proprietorship;
        (e) other type of business organization; or
        (f) any combination acting in concert with one another.
        (18) (a) "Personal identifying information" means the same as that term is defined in
 Section 63A-12-100.5.
        (b) "Personal identifying information" includes an individual's:
        (i) first name, middle name, middle initial, last name, maiden name, nickname, or other
 name used to identify the individual in the present or past;
        (ii) gender;
        (iii) date or place of birth;
        (iv) mother's maiden name;
        (v) photograph or image;
        (vi) description, based on personal characteristics;
        (vii) address;
        (viii) phone number;
        (ix) social security number;
        (x) driver license number;
        (xi) passport number;
        (xii) identification number;
        (xiii) credit card number;
        (xiv) financial account number;
        (xv) medical or disability information, to the extent that the information identifies the
 individual or to the extent that the information could be reasonably anticipated to identify the
 individual; or
                                                      -6-
        01-19-24 11:35 AM                                                                        H.B. 349
         (xvi) DNA.
         (19) "Privacy annotation" means the same as that term is defined in Section
 63A-12-100.5.
         (20) "Private provider" means any person who contracts with a governmental entity to
 provide services directly to the public.
         (21) "Private record" means a record containing data on individuals that is private as
 provided by Section 63G-2-302.
         (22) "Protected record" means a record that is classified protected as provided by
 Section 63G-2-305.
         (23) "Public record" means a record that is not private, controlled, or protected and that
 is not exempt from disclosure as provided in Subsection 63G-2-201(3)(b).
         (24) "Reasonable search" means a search that is:
         (a) reasonable in scope and intensity; and
         (b) not unreasonably burdensome for the government entity.
         (25) (a) "Record" means a book, letter, document, paper, map, plan, photograph, film,
 card, tape, recording, electronic data, or other documentary material regardless of physical form
 or characteristics:
         (i) that is prepared, owned, received, or retained by a governmental entity or political
 subdivision; and
         (ii) where all of the information in the original is reproducible by photocopy or other
 mechanical or electronic means.
         (b) "Record" does not mean:
         (i) a personal note or personal communication prepared or received by an employee or
 officer of a governmental entity:
         (A) in a capacity other than the employee's or officer's governmental capacity; or
         (B) that is unrelated to the conduct of the public's business;
         (ii) a temporary draft or similar material prepared for the originator's personal use or
 prepared by the originator for the personal use of an individual for whom the originator is
 working;
         (iii) material that is legally owned by an individual in the individual's private capacity;
         (iv) material to which access is limited by the laws of copyright or patent unless the
                                                       -7-
        H.B. 349                                                                  01-19-24 11:35 AM
 copyright or patent is owned by a governmental entity or political subdivision;
        (v) proprietary software;
        (vi) junk mail or a commercial publication received by a governmental entity or an
 official or employee of a governmental entity;
        (vii) a book that is cataloged, indexed, or inventoried and contained in the collections
 of a library open to the public;
        (viii) material that is cataloged, indexed, or inventoried and contained in the collections
 of a library open to the public, regardless of physical form or characteristics of the material;
        (ix) a daily calendar or other personal note prepared by the originator for the
 originator's personal use or for the personal use of an individual for whom the originator is
 working;
        (x) a computer program that is developed or purchased by or for any governmental
 entity for its own use;
        (xi) a note or internal memorandum prepared as part of the deliberative process by:
        (A) a member of the judiciary;
        (B) an administrative law judge;
        (C) a member of the Board of Pardons and Parole; or
        (D) a member of any other body, other than an association or appeals panel as defined
 in Section 53G-7-1101, charged by law with performing a quasi-judicial function;
        (xii) a telephone number or similar code used to access a mobile communication
 device that is used by an employee or officer of a governmental entity, provided that the
 employee or officer of the governmental entity has designated at least one business telephone
 number that is a public record as provided in Section 63G-2-301;
        (xiii) information provided by the Public Employees' Benefit and Insurance Program,
 created in Section 49-20-103, to a county to enable the county to calculate the amount to be
 paid to a health care provider under Subsection 17-50-319(2)(e)(ii);
        (xiv) information that an owner of unimproved property provides to a local entity as
 provided in Section 11-42-205;
        (xv) a video or audio recording of an interview, or a transcript of the video or audio
 recording, that is conducted at a Children's Justice Center established under Section 67-5b-102;
244