Utah Code Ann. § 35A-4-314
(1) The division shall disclose to a creditor who has obtained judgment against a debtor the name and address of the last known employer of the debtor if:
(2)
(a) A court shall grant an order to disclose the information described in Subsection (1) if, under the applicable Utah Rules of Civil Procedure:
(b) A court may not grant an order to disclose the information described in Subsection (1), if the court finds that the division has established that disclosure will have a negative effect on:
(3) If a court order is granted in accordance with this section, a judgment creditor shall:
(5) A judgment creditor may not:
(7) If a judgment creditor or other party fails to comply with the data safeguard and security measures under 20 C.F.R. Sec. 603.9, the judgment creditor or other party is subject to a civil penalty of no more than $10,000 enforceable by the Utah Office of the Attorney General as follows:
(b) if the attorney general prevails in enforcing the civil penalty against the judgment creditor or other party: