1. (1) The governing board shall:

   1. (a) recommend changes to the state data privacy policy;
   2. (b) hear issues raised by the ombudsperson regarding existing governmental entity privacy practices;

   3. (c) evaluate and recommend the appropriate:

      1. (i) structure and placement for the office within state government; and
      2. (ii) authority to be granted to the office, including any authority to make rules; and

   4. (d) recommend funding mechanisms and strategies for governmental entities to enable compliance with data privacy responsibilities, including:

      1. (i) appropriations;
      2. (ii) rates;
      3. (iii) grants; and
      4. (iv) internal service funds.

2. (2) In fulfilling the duties under this part, the governing board may receive and request input from:

   1. (a) governmental entities;
   2. (b) elected officials;
   3. (c) subject matter experts; and
   4. (d) other stakeholders.

Amended by Chapter 202, 2026 General Session