Ask Reggi Your Question Now
Can I use third-party project management tools that collect personal information in Utah? What are the requirements?
Based on the documents provided, there are specific requirements for the collection and use of personally identifiable information in Utah.
Use of Personally Identifiable Information
According to UTAC R895-8-6, any personally identifiable information provided to a State website shall be used solely by the State, its entities, and third party agents with whom it has contracted to perform a state function on its behalf, unless superseded by a federal statute, federal regulation, or State statute.
License and Authority from Insurers Required
Under UTCO 31A-25-201, a person may not perform, offer to perform, or advertise any service as a third party administrator in Utah without a valid license under Section 31A-25-203 and express authority from all insurers it represents.
Collection of Personally Identifiable Information
UTCO 63D-2-103 states that a governmental entity may not collect personally identifiable information related to a user of the governmental entity’s governmental website unless the governmental entity has taken reasonable steps to ensure that the website complies with Subsection (2). A governmental website shall contain a privacy policy statement that discloses the personally identifiable information collected by the governmental entity, how it is used, and the procedures by which a user may request access to and correction of their personally identifiable information.
Based on the above documents, it is important to ensure that any third-party project management tools used for collecting personal information comply with the requirements set forth in these statutes. It is recommended that you review the privacy policy of any third-party tool to ensure compliance with Utah law.
Jurisdiction
Utah