(1) Dissemination of information from a criminal history record or warrant of arrest information from division files is limited to:

1. (a) criminal justice agencies for purposes of administration of criminal justice and for employment screening by criminal justice agencies;
2. (b) noncriminal justice agencies or individuals for any purpose authorized by statute, executive order, court rule, court order, or local ordinance;
3. (c) agencies or individuals for the purpose of obtaining required clearances connected with foreign travel or obtaining citizenship;

4. (d)

   1. (i) agencies or individuals pursuant to a specific agreement with a criminal justice agency to provide services required for the administration of criminal justice; and
   2. (ii) the agreement shall specifically authorize access to data, limit the use of the data to purposes for which given, and ensure the security and confidentiality of the data;
5. (e) agencies or individuals for the purpose of a preplacement adoptive study, in accordance with the requirements of Sections 78B-6-128 and 78B-6-130;

6. (f)

   1. (i) agencies and individuals as the commissioner authorizes for the express purpose of research, evaluative, or statistical activities pursuant to an agreement with a criminal justice agency; and
   2. (ii) private security agencies through guidelines established by the commissioner for employment background checks for their own employees and prospective employees;
7. (g) a qualifying entity for employment background checks for their own employees and persons who have applied for employment with the qualifying entity; and
8. (h) other agencies and individuals as the commissioner authorizes and finds necessary for protection of life and property and for offender identification, apprehension, and prosecution pursuant to an agreement.

(3)

1. (a) Before requesting information under Subsection (1)(g), a qualifying entity must obtain a signed waiver from the person whose information is requested.

2. (b) The waiver must notify the signee:

   1. (i) that a criminal history background check will be conducted;
   2. (ii) who will see the information; and
   3. (iii) how the information will be used.

3. (c) Information received by a qualifying entity under Subsection (1)(g) may only be:

   1. (i) available to persons involved in the hiring or background investigation of the employee; and
   2. (ii) used for the purpose of assisting in making an employment or promotion decision.
4. (d) A person who disseminates or uses information obtained from the division under Subsection (1)(g) for purposes other than those specified under Subsection (3)(c), in addition to any penalties provided under this section, is subject to civil liability.

5. (e) A qualifying entity that obtains information under Subsection (1)(g) shall provide the employee or employment applicant an opportunity to:

   1. (i) review the information received as provided under Subsection (8); and
   2. (ii) respond to any information received.
6. (f) In accordance with Title 63G, Chapter 3, Utah Administrative Rulemaking Act, the division may make rules to implement this Subsection (3).

7. (g)

   1. (i) The applicant fingerprint card fee under Subsection (1)(g) is $20.
   2. (ii) The name check fee under Subsection (1)(g) is $15.
   3. (iii) These fees remain in effect until changed by the division through the process under Section 63J-1-504.
   4. (iv) Funds generated under Subsections (3)(g)(i), (3)(g)(ii), and (8)(b) shall be deposited in the General Fund as a dedicated credit by the department to cover the costs incurred in providing the information.
8. (h) The division or its employees are not liable for defamation, invasion of privacy, negligence, or any other claim in connection with the contents of information disseminated under Subsection (1)(g).

(4)

1. (a) Any criminal history record information obtained from division files may be used only for the purposes for which it was provided and may not be further disseminated, except under Subsections (4)(b) and (c).
2. (b) A criminal history provided to an agency pursuant to Subsection (1)(e) may be provided by the agency to the person who is the subject of the history, another licensed child-placing agency, or the attorney for the adoptive parents for the purpose of facilitating an adoption.
3. (c) A criminal history of a defendant provided to a criminal justice agency under Subsection (1)(a) may also be provided by the prosecutor to a defendant's defense counsel, upon request during the discovery process, for the purpose of establishing a defense in a criminal case.

(6)

1. (a) This section does not preclude the use of the division's central computing facilities for the storage and retrieval of criminal history record information.
2. (b) This information shall be stored so it cannot be modified, destroyed, or accessed by unauthorized agencies or individuals.

(8)

1. (a) The commissioner shall establish procedures to allow an individual right of access to review and receive a copy of the individual's criminal history report.
2. (b) A processing fee for the right of access service, including obtaining a copy of the individual's criminal history report under Subsection (8)(a) is $15. This fee remains in effect until changed by the commissioner through the process under Section 63J-1-504.

3. (c)

   1. (i) The commissioner shall establish procedures for an individual to challenge the completeness and accuracy of criminal history record information contained in the division's computerized criminal history files regarding that individual.
   2. (ii) These procedures shall include provisions for amending any information found to be inaccurate or incomplete.

(9) The private security agencies as provided in Subsection (1)(f)(ii):

1. (a) shall be charged for access; and
2. (b) shall be registered with the division according to rules made by the division under Title 63G, Chapter 3, Utah Administrative Rulemaking Act.

(11)

1. (a) It is a class B misdemeanor for a person to knowingly or intentionally access, use, disclose, or disseminate a record created, maintained, or to which access is granted by the division or any information contained in a record created, maintained, or to which access is granted by the division for a purpose prohibited or not permitted by statute, rule, regulation, or policy of a governmental entity.
2. (b) A person who discovers or becomes aware of any unauthorized use of records created or maintained, or to which access is granted by the division shall inform the commissioner and the director of the Utah Bureau of Criminal Identification of the unauthorized use.