1. (1) The governor shall, with the advice and consent of the Senate, appoint a chief privacy officer.
2. (2) The chief privacy officer is the director of the office.

3. (3) The chief privacy officer:

   1. (a) shall exercise all powers given to and perform all duties imposed on the office;
   2. (b) has administrative authority over the office;
   3. (c) may make changes in office personnel and service functions under the chief privacy officer's administrative authority;
   4. (d) may authorize a designee to assist with the chief privacy officer's responsibilities; and

   5. (e) shall report annually, on or before June 30, to the Government Operations Interim Committee regarding:

      1. (i) recommendations for legislation to address data privacy concerns; and
      2. (ii) reports received from state agencies regarding the sale or sharing of personal data provided under Section 63A-19-401.3.

Amended by Chapter 202, 2026 General Session