Skip to main content

Privacy for Individuals

Salt Lake County ensures residents stay informed about state and federal statutes regarding use of personal data. On this page you can make requests to access, amend, correct, or protect your personal data that is in the County's possession.

What is Personal Data?

Personal data means information that is linked or can be reasonably linked to an identified individual or an identifiable individual. (Utah Code § 63A-19-101(25)). Examples include name, address, email, phone, date of birth, Social Security Number, medical, health, or financial information, employment records, case numbers, location data, and IP addresses.

Your Rights Under Utah Law (Utah Code § 63A-19)

Learn how to manage personal data you’ve provided to Salt Lake County, report concerns, or submit a complaint about Salt Lake County’s use of your personal data.

Every time a County agency collects personal data from you — in person, by phone, on paper, or online — it must give you a privacy notice before or at the point of collection (Utah Code § 63A-19-402; SLCo Policy CW-2022 § 5). That notice tells you what data is being collected, why, and how it will be used. You can also request a copy after the fact. 

Privacy Notice Inventory

If the County holds incorrect personal data about you, you may request correction (Utah Code § 63A-19-403; SLCo Policy CW-2022 § 11). 

Request a Correction

Please submit your correction request here.

The County is required by law to collect only the minimum personal data necessary for each stated purpose (§ 63A-19-401(2)(a)(i)). This is a legal obligation the County owes to you — not a right you enforce through a formal legal process. If you believe a County agency is collecting more information than the situation requires, you may ask why the information is needed or use the “File a Privacy Complaint” section below to report it.

Qualifying government employees may request that specific personal information held in County records be classified as a private record under Utah Code § 63A-19-408, shielding it from public disclosure.

Who Qualifies?

  • Peace officers (§ 53-13-102); state or federal judges; court commissioners
  • Judges or prosecutors under Utah Code of Military Justice or Armed Forces (Title 10, U.S.C.)
  • Federal prosecutors; law enforcement officials (§ 53-5a-311)
  • Any government employee who — due to the unique nature of their work or recent credible threats — would face immediate and substantial risk of physical harm if their personal information were disclosed

What Can Be Protected?  (§ 63A-19-408(1)(c))

  • Home address; home, personal mobile, and pager telephone numbers; personal email address
  • Social Security number; insurance coverage; marital status; payroll deductions
  • The same information for qualifying cohabitating family members (spouse, child, sibling, parent, or grandparent)
At-Risk Employee — Key Facts

Protection lasts four years from the date signed (including after employment ends) and one year after official notice of death. No automatic renewal.

Property record note: classification may prevent certain automated property mailings (annexation/zoning notices) — the application form includes a waiver. Legal authority: Utah Code § 63A-19-408.

At-Risk Government Employee Application

500 or more individuals affected

  • County must notify the Utah Cyber Center and Attorney General without unreasonable delay and no later than 5 days from discovery (§ 63A-19-405(2)(a)). Available information is provided first; supplemented as more becomes known.

Notice to affected individuals

  • Required under § 63A-19-406. Notice describes what happened, what data was involved, and steps to protect yourself

If you received a breach notice

  • Read it carefully. Follow the guidance provided. Contact us at the Salt Lake County Data Privacy Office with questions.

If you think your data was breached but haven't been notified

  • Contact the Salt Lake County Data Privacy Office immediately with a description of what you observed and when.

File a Privacy Complaint or Report a Concern

If you believe Salt Lake County has not properly handled your personal data, you have the right to report it.

Report a Concern

Submit a privacy concern with Salt Lake County's Privacy Office

If your concern is not resolved, or if you prefer to go directly to the State, file a complaint with the Utah Office of Data Privacy’s Ombudsperson (Utah Code § 63A-19-501).

Email Utah Data Privacy Ombudsperson

Frequently Asked Questions

No. Selling personal data is prohibited under Utah Code § 63A-19-401(3)(b)-(c) and County Policy CW-2022 § 9.1.2, unless expressly required by law.

Yes. The GDPA protects personal data of any individual. Your HR records, payroll, and benefits data are all protected under the same law.

Retention periods vary by record series. Ask the relevant agency or contact us at the Salt Lake County Data Privacy Office. For public records under GRAMA, contact the GRAMA and Records team.

The County may only share personal data with legal authority (§ 63A-19 and § 63G-2-206). If you believe sharing is occurring without legal basis, report it to us at the Salt Lake County Data Privacy Office.

Contact us at the Salt Lake County Data Privacy Office with the agency name and a description of the interaction. You may also file a formal complaint using the form in the “File a Privacy Complaint” section on this page.

Visit the “At-Risk Government Employees” section on this page for eligibility and what can be protected. The application (Coming Soon) can be submitted to your Agency Data Coordinator or directly to us at the Salt Lake County Data Privacy Office.

*Protection lasts four years and does not renew automatically.

Read the notice carefully — it will describe what data was involved, what happened, and protective steps to take. Follow those steps. Contact us at the Salt Lake County Data Privacy Office if you have questions about the incident or your specific situation. See the “What Happens When There Is a Data Breach” section on this page for more.

GRAMA (Utah Code Title 63G, Chapter 2) is the state’s public records law. It classifies government records as public, private, protected, or controlled. If your personal data is classified as “private” or “protected” under GRAMA, it is shielded from public disclosure. The GDPA and GRAMA work together — when the County collects your data, the 

Yes. The GDPA protects the personal data of any individual — residents, County employees, contractors, and volunteers. Whether you filled out a County form as a member of the public, submitted an application for volunteer work, or signed an employee onboarding document, your personal data is protected under the same law. The same rights apply to you.

Privacy Resources

Salt Lake County Privacy Policy.pdf
GDPA Utah Code Part 63A-19-4
SLCo County Wide Policies