1. (1) A governmental entity seeking to substitute the governmental entity's data privacy training for the office's training under Subsection 63A-3-301(5)(a)(ii) shall submit:

   1. (a) a completed application form, created by the office; and
   2. (b) a copy of the governmental entity's data privacy training.

2. (2) The office may allow a governmental entity to substitute the governmental entity's data privacy training for the office's training if the governmental entity's data privacy training contains the same information as the office's training, including information regarding:

   1. (a) the data privacy requirements found in Title 63A, Chapter 19, Part 4, the Government Data Privacy Act and any other data privacy laws that may be applicable to the governmental entity;
   2. (c) the relationship between data privacy and records management;
   3. (d) the data privacy roles and responsibilities of governmental employees, including the duties of chief administrative officers and appointed records officers; and
   4. (e) data privacy best practices.

KEY: data privacy, extensions, exemptions, training

Date of Last Change: November 10, 2025

Authorizing, and Implemented or Interpreted Law: 63A-19-301(5)