(1) The following records are private:

1. (a) records concerning an individual's eligibility for unemployment insurance benefits, social services, welfare benefits, or the determination of benefit levels;
2. (b) records containing data on individuals describing medical history, diagnosis, condition, treatment, evaluation, or similar medical data;
3. (c) records of publicly funded libraries that when examined alone or with other records identify a patron;

4. (d) records received by or generated by or for:

   1. (i) the Independent Legislative Ethics Commission, except for:

      1. (A) the commission's summary data report that is required under legislative rule; and
      2. (B) any other document that is classified as public under legislative rule; or
   2. (ii) a Senate or House Ethics Committee in relation to the review of ethics complaints, unless the record is classified as public under legislative rule;

5. (e) records received or generated for a Senate confirmation committee concerning character, professional competence, or physical or mental health of an individual:

   1. (i) if prior to the meeting, the chair of the committee determines release of the records:

      1. (A) reasonably could be expected to interfere with the investigation undertaken by the committee; or
      2. (B) would create a danger of depriving a person of a right to a fair proceeding or impartial hearing; and
   2. (ii) after the meeting, if the meeting was closed to the public;
6. (f) employment records concerning a current or former employee of, or applicant for employment with, a governmental entity that would disclose that individual's home address, home telephone number, Social Security number, insurance coverage, marital status, or payroll deductions;
7. (g) records or parts of records under Section 63G-2-303 that a current or former employee identifies as private according to the requirements of that section;
8. (h) that part of a record indicating a person's Social Security number or federal employer identification number if provided under Section 31A-23a-104, 31A-25-202, 31A-26-202, 58-1-301, 58-55-302, 61-1-4, or 61-2f-203;

9. (i) that part of a voter registration record identifying a voter's:

   1. (i) driver license or identification card number;
   2. (ii) Social Security number, or last four digits of the Social Security number; or
   3. (iii) email address;

10. (j) a record that:

    1. (i) contains information about an individual;
    2. (ii) is voluntarily provided by the individual; and

    3. (iii) goes into an electronic database that:

       1. (A) is designated by and administered under the authority of the Chief Information Officer; and
       2. (B) acts as a repository of information about the individual that can be electronically retrieved and used to facilitate the individual's online interaction with a state agency;

11. (k) information provided to the Commissioner of Insurance under:

    1. (i) Subsection 31A-23a-115(2)(a);
    2. (ii) Subsection 31A-23a-302(3); or
    3. (iii) Subsection 31A-26-210(3);
12. (l) information obtained through a criminal background check under Title 11, Chapter 40, Criminal Background Checks by Political Subdivisions Operating Water Systems;

13. (m) information provided by an offender that is:

    1. (i) required by the registration requirements of Title 77, Chapter 41, Sex and Kidnap Offender Registry; and
    2. (ii) not required to be made available to the public under Subsection 77-41-110(4);
14. (n) a statement and any supporting documentation filed with the attorney general in accordance with Section 34-45-107, if the federal law or action supporting the filing involves homeland security;
15. (o) electronic toll collection customer account information received or collected under Section 72-6-118, including contact and payment information and customer travel data;
16. (p) an email address provided by a military or overseas voter under Section 20A-16-501; and
17. (q) a completed military-overseas ballot that is electronically transmitted under Title 20A, Chapter 16, Uniform Military and Overseas Voters Act.

(2) The following records are private if properly classified by a governmental entity:

1. (a) records concerning a current or former employee of, or applicant for employment with a governmental entity, including performance evaluations and personal status information such as race, religion, or disabilities, but not including records that are public under Subsection 63G-2-301(2)(b) or 63G-2-301(3)(o), or private under Subsection (1)(b);

2. (b) records describing an individual's finances, except that the following are public:

   1. (i) records described in Subsection 63G-2-301(2);
   2. (ii) information provided to the governmental entity for the purpose of complying with a financial assurance requirement; or
   3. (iii) records that must be disclosed in accordance with another statute;
3. (c) records of independent state agencies if the disclosure of those records would conflict with the fiduciary obligations of the agency;
4. (d) other records containing data on individuals the disclosure of which constitutes a clearly unwarranted invasion of personal privacy;
5. (e) records provided by the United States or by a government entity outside the state that are given with the requirement that the records be managed as private records, if the providing entity states in writing that the record would not be subject to public disclosure if retained by it; and
6. (f) any portion of a record in the custody of the Division of Aging and Adult Services, created in Section 62A-3-102, that may disclose, or lead to the discovery of, the identity of a person who made a report of alleged abuse, neglect, or exploitation of a vulnerable adult.

(3)

1. (a) As used in this Subsection (3), "medical records" means medical reports, records, statements, history, diagnosis, condition, treatment, and evaluation.

2. (b) Medical records in the possession of the University of Utah Hospital, its clinics, doctors, or affiliated entities are not private records or controlled records under Section 63G-2-304 when the records are sought:

   1. (i) in connection with any legal or administrative proceeding in which the patient's physical, mental, or emotional condition is an element of any claim or defense; or
   2. (ii) after a patient's death, in any legal or administrative proceeding in which any party relies upon the condition as an element of the claim or defense.
3. (c) Medical records are subject to production in a legal or administrative proceeding according to state or federal statutes or rules of procedure and evidence as if the medical records were in the possession of a nongovernmental medical care provider.