1. (1)(a) If the office approves a request, the office shall provide a notice of approval to the governmental entity.

   1. (b) A notice of approval for a limited extension or exemption, shall describe:

      1. (i) the length of the extension or exemption; and
      2. (ii) any specific terms and conditions.
   2. (c) The office shall provide a notice of approval to the state privacy auditor and the governing board.

2. (2)(a) If the office denies a request, the office shall provide a notice of denial to the governmental entity.

   1. (b) A notice of denial of a request to substitute the governmental entity's data privacy training shall describe the reasons why the request was denied.

KEY: data privacy, extensions, exemptions, training

Date of Last Change: November 10, 2025

Authorizing, and Implemented or Interpreted Law: 63A-19-301(5)