Utah Code Ann. § 63G-2-107 – Disclosure of records subject to federal law.

(1) Notwithstanding Subsection 63G-2-201(6), this chapter does not apply to a record containing protected health information as defined in 45 C.F.R., Part 164, Standards for Privacy of Individually Identifiable Health Information, if the record is:
1. (a) controlled or maintained by a governmental entity; and
2. (b) governed by 45 C.F.R., Parts 160 and 164, Standards for Privacy of Individually Identifiable Health Information.
(2) The disclosure of an education record as defined in the Family Educational Rights and Privacy Act, 34 C.F.R. Part 99, that is controlled or maintained by a governmental entity shall be governed by the Family Educational Rights and Privacy Act, 34 C.F.R. Part 99.