NOTICE OF SUBSTANTIVE CHANGE
1. Agency Information
Government Operations, Data Privacy
Taylorsville State Office Building
Salt Lake City, UT 84114-1007
2. Contact Persons
Please address questions regarding information on this notice to the persons listed above.
3. General Information
A. Rule or section catchline:
R18-1. Relief from Data Privacy Requirements
B. Purpose of the new rule or reason for the change:
HB 450, passed in the 2026 General Session, removed the requirement that governmental entities apply to the Office of Data Privacy (Office) for permission to provide their own data privacy training in lieu of the data privacy training created by the Office.
Now governmental entities can decide on their own whether to use their own data privacy training or the data privacy training created by the Office. Whereas governmental entities no longer need to apply for a waiver there is no need to have a rule describing that process.
HB 450 (2026) also changed the requirements for the Office to grant an extension or exemption. The statute now describes the process with enough specificity that there is no longer a need for a rule describing the process.
C. Summary of the new rule or change:
This filing repeals the rule in its entirety.
4. Legislative Action Information
A. Are any changes in this filing
because of state legislative action?
Changes are because of legislative action.
B. If yes, any bill number and
session:
HB 450 (2026 General Session)
5. Fiscal Information
Provide an estimate and written explanation of the aggregate anticipated cost or savings to:
Repealing this rule will not result in any costs or savings to the state budget because this rule only eliminates processes that are no longer necessary.
Repealing this rule will not result in any costs or savings to local governments because this rule only eliminates processes that are no longer necessary.
C. Small businesses ("small business" means a business employing 1-49 persons):
Repealing this rule will not result in any costs or savings to small businesses because this rule only eliminates processes for governmental entities that are no longer necessary.
D. Non-small businesses ("non-small business" means a business employing 50 or more persons):
Repealing this rule will not result in any costs or savings to non-small businesses because this rule only eliminates processes for governmental entities that are no longer necessary.
E. Persons other than small businesses, non-small businesses, state, or local government entities ("person" means any individual, partnership, corporation, association, governmental entity, or public or private organization of any character other than an agency):
Repealing this rule will not result in any costs or savings to persons other than small businesses, non-small businesses, state, or local government entities because this rule only eliminates processes for governmental entities that are no longer necessary.
F. Compliance costs for affected persons:
There are no costs for affected persons because this rule only eliminates processes for governmental entities that are no longer necessary.
6. Regulatory Impact Summary Table
Enter the cost or savings in the relevant cell. If there is no cost or savings, enter, "$0." If a cost or savings is inestimable, enter, "inestimable."
7. Regulatory Impact Analysis Approval
The Commissioner of the Department of Government Operations, Marvin Dodge, has reviewed and approved this regulatory impact analysis.
8. Family Impact Information
A. The agency has considered this rule's impact on family health, stability, and formation:
9. Citation Information
Provide citations to the statutory authority for the rule. If there is also a federal requirement for the rule, provide a citation to that requirement:
Subsection 63A-19-301(4)(l)
11. Public Notice Information
The public may submit written or oral comments to the agency identified in box 1.
A. Comments will be accepted until:
12. Effective Date Information
This rule change MAY become effective on:
(NOTE: This is the date the agency anticipates making the filing effective. It is NOT the effective date)
13. Agency Authorization Information
Agency head or
designee and title:
Marvin Dodge, Commissioner
R18. Government Operations, Data Privacy.
[R18-1. Relief from Data Privacy Requirements. This rule is authorized by Subsection 63A-19-301(4)(f). 
