1. (1) Any personally identifiable information an individual provides to a State website shall be used solely by the State, its entities, and third party agents with whom it has contracted to perform a state function on its behalf, unless:

   1. (a) this rule is superceded by a federal statute, federal regulation, or State statute in which case the personally identifiable information shall be used by other parties only to the extent required by the superseding federal statute, federal regulation or State Statute, or
   2. (b) the information is designated as public record by an individual State agency as authorized under Title 63G, Chapter 2 of the Utah Code, Government Records Access and Management Act.

KEY: privacy, website, CIO

Date of Last Change: December 20, 2001

Notice of Continuation: September 30, 2025

Authorizing, and Implemented or Interpreted Law: 63F-1-206; 63G-3-201; 63G-2-101 et seq.