Skip to main content

Privacy Notices

The Salt Lake County Health Department (SLCoHD) is committed to protecting the personal information we collect. These Privacy Notices are provided in accordance with Utah Code 63A-19, the Government Data Privacy Act (GDPA), to inform you about how we collect, use, and protect your personal data when you interact with SLCoHD. This page also describes how you can manage your personal data, and how to contact us with questions or concerns.

Links

Privacy Officer

Salt Lake County Health Department

2001 South State Street , Ste S-2600
PO Box 144575
Salt Lake City, Utah 84114

Privacy Notice: Public Records

The personal data that you provide, or that is collected from you, is classified as a public record pursuant to Utah Code § 63G-2-301 of the Government Records Access and Management Act (GRAMA), and may be made available to the public as provided by Utah Code § 63G-2-201.

Privacy Notice: Nonpublic Records

Effective May 18, 2026, in accordance with Utah Code Title 63A, Chapter 19.

We request personal, nonpublic data from you to provide services and to promote and protect community and environmental health. This information includes:

  • Legal name
  • Preferred name
  • Approved ID information
  • Date of birth
  • Address
  • Email address
  • Phone number
  • Phone carrier for text messages

Additional data we may collect:

  • Demographic information
  • Social security number (for medical billing or vital records verification purposes)
  • Medical or health information
  • Payment or financial information
  • Home ownership and living conditions, and similar items of a personal nature
  • Video surveillance in public, nonclinical areas of SLCoHD facilities

If you are providing your personal data through our website, we may also collect information about you that is not personally identifiable. This includes:

  • IP addresses
  • Time and date of visit
  • Browser type
  • Equipment types
  • Geographic location
  • Pages and screen views
  • Events
  • Traffic acquisition
  • Retention
  • Feedback regarding services, business process, website and customer support
  • Preferences
  • MAC address
  • Social media usernames

The Salt Lake County Health Department uses data to ensure high-quality service delivery, support operational needs in our mission to promote and protect community and environmental health, and continually improve patient and client experiences. In some cases, personal information also helps us meet legal, financial, and reporting obligations. We may also employ technology-assisted tools, like AI and automation, with safeguards to support these purposes while limiting personal data use and requiring additional review for high-risk automated processing. In many instances, your data is only shared in aggregate, with personally identifiable data removed.

We use your nonaggregated personal, nonpublic data for the following purposes:

  • Account Management: Patient and permittee account data allows us to establish your identity and ensure secure access to services.
  • Business and Financial Transactions: Data related to paying for services are necessary for financial accountability and auditing.
  • Communication and Notifications: Contact information is used to communicate information concerning department business or to respond to inquiries.
  • Promoting and Protecting Community and Environmental Health: Data related to environmental health permitting and requests for service, and data related to patients and clients, are used to fulfill statutory public health requirements under Utah Code 26A.
  • Safety and Security: Data may be collected to help maintain a safe environment for all patients, clients, and staff. This includes video surveillance in public, nonclinical areas of health department facilities.

Other reasons we may use your data:

  • Compliance and Reporting: We must collect certain data for regulatory compliance, grant applications and reporting, and reporting to governing bodies.
  • IT System Backups and Data Recovery: Patient, client, and operational data may be included in routine IT backups to ensure service continuity and protect against data loss due to technical failure, cyber incidents, or natural disasters. Backup data is stored securely and retained only as long as necessary for recovery purposes.
  • Marketing: Gathering and analyzing client engagement, preferences, and behavioral trends to promote services, programs, and resources effectively.
  • Optimizing Digital Services and Digital User Experience: Collecting web data helps the department understand how visitors interact with online resources.
  • Program Registration or Enrollment: Some programs require enrollment, registration, or application.

We aggregate your data with the data of others for the following reasons. You cannot be identified individually when data is aggregated.

  • Accessibility Services: Usage data from assistive technologies may be reviewed to improve accessibility support.
  • Data Sharing for Research and Evaluation: In limited cases, anonymized or aggregated data may be shared with approved partners to support research, strategic planning, or evaluation efforts aligned with the department's mission.
  • Operational Efficiency: Data helps optimize public health services and operations, including staffing and resource allocation.
  • Program Evaluation and Development: Aggregate patient, applicant, and client data help the department assess the success of programs and guide the allocation of future resources.
  • Resource Planning and Budgeting: Data helps justify funding requests and allocate resources effectively based on actual usage trends.
  • Surveys and Suggestions: Data that is provided voluntarily through surveys or suggestion forms is analyzed to improve services and operations. We do not collect personal data in these instances.

If you choose not to provide the personal data requested, the public health services available to you are limited. Refusing to provide information will restrict your ability to apply for permits or utilize department programs.

Salt Lake County Health Department is committed to keeping secure the data you provide to us, and we take reasonable precautions to protect your personally identifiable information from loss, misuse, or alteration. We use technical, administrative, and physical safeguards to ensure your personal data is protected from unauthorized access, use, or disclosure.

In compliance with state law (including, but not limited to, the Utah Government Records Access and Management Act [GRAMA] and the Utah Government Data Privacy Act) and federal law (including, but not limited to, the Health Insurance Portability and Accountability Act [HIPAA]), SLCoHD maintains records that include personal data and disseminates only the information that is required or allowed to be disseminated under applicable law and redacts information required to be withheld from the general public. Additionally, SLCoHD follows retention laws and policies regarding storing and destruction of documents. Hard copies of records are kept secure in employee-only areas and secured further in locked cabinets or drawers. Electronic data are protected in accordance with best practices and applicable law.

Salt Lake County Health Department does not sell any personal information to third parties. We may share personal data with municipal, county, state, and federal partners, agencies with whom the department has an agreement or contract, and occasionally with contracted third-party software vendors solely for the purpose of delivering department services and support. The department may also disclose personal information when required to do so by a valid court order.

Third-party Vendors

In accordance with Utah Code 63A-19-401.4, vendors who contract with the department agree to abide by state government data regulations. However, the department does not control how third parties handle your data. We assume no responsibility for the independent policies, practices, and terms of use of such vendors.

Salt Lake County Health Department retains personal information only for as long as necessary to support the effective delivery of public health services and programs used or anticipated to be used by the individual. Information may also be retained for a reasonable period thereafter or as required to meet legal or regulatory obligations or operational needs. When personal information is no longer required, the department securely disposes of or anonymizes it in accordance with our data retention and privacy policies.

Record Series

Personal data collected is part of a record series specific to the program in which it was collected. Please consult with an employee in the program requesting your data for the specific record series information.

If you have submitted personally identifiable information to the Salt Lake County Health Department, under applicable privacy laws you have the following rights:

  • Access: You may request to see the data we hold about you.
  • Amend or Correct: You may request we correct or amend any inaccuracies in your data.
  • Refuse: If you choose not to provide the personal data requested, the public health services available to you are limited. Refusing to provide information will restrict your ability to apply for permits or utilize department programs.

To carry out your rights, you may contact the specific program requesting your data or by contacting the department's Privacy Officer.

Privacy Officer

Salt Lake County Health Department

2001 South State Street , Ste S-2600
PO Box 144575
Salt Lake City, Utah 84114

If you are an at-risk employee, you may request that your personal information be classified as a private record under Utah Code § 63A-19-408. Visit the At-Risk Employees page for more information.

At-Risk Employees