Skip to main content

Privacy for County Employees

The Office of Data & Innovation is responsible for establishing and maintaining the Salt Lake County Privacy Program in accordance with Utah's Government Data Privacy Act.

Accordingly, the Council delegated authority to the Office of Data & Innovation to establish, maintain, and publish standards consistent with the County Privacy Policy to provide implementation guidance to agencies to implement the County Privacy Program.

The Office of Data & Innovation Director is designated as the County's Chief Administrative Officer to fulfill the responsibilities set out in Utah Code § 63A-l 2-l03 

Services

For All County Employees

County employees who access personal data—or supervise employees who access personal data—must complete the required privacy training and follow applicable privacy, records management, and security requirements.

What training covers

  • The basics of privacy at Salt Lake County — what personal data is, why privacy matters, how to handle personal data responsibly, and what to do if something goes wrong.

Completion deadline

  • Complete the training within 30 days of starting employment and at least once each calendar year. Utah Code § 63A-19-401.2 establishes these training requirements for employees who have access to personal data as part of their assigned duties or supervise employees who do.

How to complete it

  • Salt Lake County employees will be assigned the Annual Privacy Awareness Training in SABA. Complete the assigned course in SABA and your completion will be recorded automatically.

  • Employees who cannot access SABA may use the Alternative Training Method below to complete the same training and document completion.

Required Privacy Training - SABA
Required Privacy Training - Alternate Training

Protecting personal data comes down to a few core principles:

  • Minimize — collect and keep only what the task requires.
  • Limit access — share only with those who need it for their work.
  • Secure it — use approved channels, lock your workstation, and store records safely.
  • Be transparent — if someone asks about their information, direct them to the privacy notice.

Your Agency Data Coordinator can help with any questions and connect you to the Privacy Manager if a situation needs a closer look.

TWO STEPS — DO THEM NOW

  1. Call the IT Service Desk immediately.

  2. Email us at the Salt Lake County Data Privacy Office with ‘Privacy Incident' in the subject line. Do not wait to investigate. Do not wait until you are sure. The law starts the clock at discovery.

Note: You may find us by typing 'Privacy' in the email recipient field if you have a County email address. We are SLCo Data Privacy. If you do not have a County email address, please contact us via the link below.

Data Privacy Incident Report

If you do not have a County email address, please submit your incident report here.

For Agency Data Coordinators

  • Each County agency designates an Agency Data Coordinator to lead privacy implementation for their agency. Coordinators don't need to be legal or technical experts — the role is about knowing what your agency owns, who your partners are, and when to escalate.
  • All Data Coordinator resources — onboarding, the tiered training curriculum, PIA submission, collection point inventory, privacy notice templates, the sharing log, incident response, and annual reporting tools — coming soon on the Privacy Program SharePoint site (County login required).
  • New coordinators: start with your Role & Responsibilities and Tier 1 training on SharePoint, then email the Salt Lake County Privacy Manager to confirm your designation is on file.
Privacy Program Sharepoint

For Other Governmental Entities

Privacy Program Resources & Collaboration

Salt Lake County is building its privacy program to meet the requirements of Utah's Government Data Privacy Act. We are happy to share what we have learned with other Utah governmental entities working through similar privacy program requirements.

Our Privacy Manager can share examples of our approach to topics such as privacy notices, Privacy Impact Assessments, Data Coordinator programs, employee training, data minimization, annual reporting, and other practical privacy program tools.

We can also discuss our implementation experience, provide copies of resources that are appropriate to share, or participate in training and knowledge-sharing opportunities with other governmental entities.

Interested in connecting or requesting a resource? Contact the Salt Lake County Privacy Manager at:

Privacy Manager

Privacy Resources

Salt Lake County Privacy Policy.pdf
GDPA Utah Code Part 63A-19-4
SLCo County Wide Policies