[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-253923-105":3,"detail-sidebar-cat-1-en-105":81,"doc-detail-253923-en":127},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":74,"head_meta":76,"extra_data":78,"updated_unix":80},105,"en","privacy-program-report-version-11-template","Privacy-Program-Report - Version 1.1 - Template","","Privacy Program Report template from the Utah Office of Data Privacy (ODP) providing a structured framework for governmental entities to document and certify required data privacy program activities. Entities complete the Report before December 31 each year, prepared and certified by the chief administrative officer (CAO), and treat it as a protected record. The template includes sectioned fields for entity information, privacy program initiation status, privacy practices, and maturity and improvement strategies, aligned to Utah Code and ODP guidance.",{"@graph":14,"@context":73},[15,34,56],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/template/","Template",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/template/forms/","Forms",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/template/privacy-program-report-version-11-template/253923/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/privacy-program-report-version-11-template/253923.png","ImageObject",442,249,{"name":42,"@type":43},"Theodora","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-10-23","2026-09-13",true,{"@type":52,"interactionType":53,"userInteractionCount":55},"InteractionCounter",{"@type":54},"ViewAction",7,{"@type":57,"mainEntity":58},"FAQPage",[59,65,69],{"name":60,"@type":61,"acceptedAnswer":62},"Who must prepare and certify the Privacy Program Report each year?","Question",{"text":63,"@type":64},"The chief administrative officer (CAO) of the governmental entity must prepare and certify the Report before December 31 each year.","Answer",{"name":66,"@type":61,"acceptedAnswer":67},"What does the template require for Section 2 on privacy program status?",{"text":68,"@type":64},"Section 2 requires the entity to indicate whether it has initiated a privacy program and, if so, how it was initiated (e.g., administrative rule, ordinance, resolution, policy, or other means).",{"name":70,"@type":61,"acceptedAnswer":71},"How does the template define the privacy maturity model?",{"text":72,"@type":64},"The template provides maturity levels ranging from NON-EXISTENT through AD HOC, DEFINED, CONSISTENTLY IMPLEMENTED, MANAGED, and OPTIMIZED, describing how practices are embedded, documented, managed with metrics, and supported across the workforce.","https://schema.org",{"og:url":32,"og:type":75,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":77,"canonical":32},"index,follow",{"doc_id":79,"site_id":7},253923,1790195834,{"code":4,"msg":82,"data":83},"success",[84,89,94,99,104,109,113,118,123],{"id":85,"doc_module":22,"doc_module_name":25,"category_name":86,"show_sort_weight":87,"slug":88},11,"Presentations",90,"presentations",{"id":90,"doc_module":22,"doc_module_name":25,"category_name":91,"show_sort_weight":92,"slug":93},12,"Resumes",80,"resumes",{"id":95,"doc_module":22,"doc_module_name":25,"category_name":96,"show_sort_weight":97,"slug":98},14,"Invoices",70,"invoices",{"id":100,"doc_module":22,"doc_module_name":25,"category_name":101,"show_sort_weight":102,"slug":103},15,"Posters",60,"posters",{"id":105,"doc_module":22,"doc_module_name":25,"category_name":106,"show_sort_weight":107,"slug":108},16,"Social Media",50,"social-media",{"id":110,"doc_module":22,"doc_module_name":25,"category_name":29,"show_sort_weight":111,"slug":112},17,40,"forms",{"id":114,"doc_module":22,"doc_module_name":25,"category_name":115,"show_sort_weight":116,"slug":117},18,"Letters",30,"letters",{"id":119,"doc_module":22,"doc_module_name":25,"category_name":120,"show_sort_weight":121,"slug":122},21,"Paper Templates",5,"papers-templates",{"id":124,"doc_module":22,"doc_module_name":25,"category_name":125,"show_sort_weight":4,"slug":126},158,"General","general-158",{"code":4,"msg":82,"data":128},{"doc_id":79,"user_id":129,"nickname":42,"user_avatar":130,"doc_module":22,"category_id":110,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":55,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":136,"language":137,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":138,"faqs":139,"seo_title":140,"seo_description":12,"update_tm":141,"read_time":142},687197207919,"https://ap-avatar.wpscdn.com/avatar/a000253d6f5f7c60be?x-image-process=image/resize,m_fixed,w_180,h_180&k=1779446848396160552","PRIVACY PROGRAM REPORT TEMPLATE  \nUtah O􀀙ce 􀀖  \nData Privacy  \nVERSION 1.1  \nDISCLAIMER  \nThis template is provided by the Utah Office of Data Privacy (ODP) as a resource to assist governmental entities. This template is intended to serve as general guidance and a foundational structure only. Governmental entities are responsible for reviewing, customizing, and adapting this template to ensure compliance with applicable laws, regulations, policies, and organizational needs.  \nThe ODP makes no representations or warranties, express or implied, regarding the legal sufficiency or suitability of this template for any specific purpose. By using this template, governmental entities acknowledge and agree that the ODP is not liable for the use or modification of this template. This template is not legal advice and is not a substitute for consultation with legal counsel. Entities should consult with their own legal counsel before finalizing or executing a document based on this template.  \nPRIVACY PROGRAM REPORT TEMPLATE V1.1  \nEach governmental entity must complete a Privacy Program Report (Report) before December 31st of each year. The Report must be prepared and certified by the chief administrative officer (CAO) of the governmental entity. Completion of the Report satisfies the requirement that the governmental entity initiate a data privacy program as required by Utah Code § 63A-19-401(2)(a)(i). The Report is a protected record under Utah Code § 63G-2-305 but may be provided to the Office upon request.  \nDefinitions: Terms used in this Report are defined in Utah Code § 63A-19-101 .  \nVersion History located in Appendix A.  \nPRIVACY PROGRAM REPORT TEMPLATE 2  \nSECTION 1: GOVERNMENTAL ENTITY INFORMATION  \nName:    \nType (Select One):  \nState Agency  \nCounty  \nMunicipality  \nSpecial Service District Board or Commission College or University  \nOther    \nInterlocal  \nAssociations of Government Charter School  \nSpecial District  \nIndependent or Quasi-Government Public School  \nMailing Address:    \nChief Administrative Officer (CAO):  \nName:    \nTitle:     \nEmail:    \nPhone:    \nPRIVACY PROGRAM REPORT TEMPLATE 3  \nSECTION 2: PRIVACY PROGRAM STATUS  \nThe Report must include whether the governmental entity has initiated a privacy program. (Utah Code § 63A-19-401.3(1)(a)) A privacy program is the structured collection of a governmental entity’s privacy practices, policies, and procedures that govern its processing and protection of personal data to ensure compliance with applicable laws. A governmental entity’s privacy program will meet the December 31, 2025, deadline even if it is not mature or ifit is in its early stages, so long as the entity has fully completed its privacy program report or initiated its program through other means that the entity has determined as meeting the requirements of the Government Data Privacy Act (GDPA) .  \nHas your governmental entity initiated a privacy program?  \nYes  \nNo  \nHow has the governmental entity initiated a privacy program?  \nAdministrative Rule  \nOrdinance  \nResolution  \nPolicy  \nPrivacy Program Report  \nOther    \nPRIVACY PROGRAM REPORT TEMPLATE 4  \nSECTION 3: PRIVACY PRACTICES, MATURITY AND STRATEGIES  \nThe Report must include any privacy practices implemented by the governmental entity and strategies for improving the governmental entity’s privacy program and practices. (Utah Code § 63A-19-401.3(1)(b)(i) and (ii)). The privacy practices listed below are discussed in the Privacy Program Framework (Framework), which the Office created and maintains, and which may be accessed on p[rivacy.utah.gov](rivacy.utah.gov). The Framework includes privacy practice requirements that are generally required by governmental entities as established in the GDPA, Title 63G, Chapter 2, Government Records Access and Management Act (GRAMA), Title 63A, Chapter 12, Division of Archives and Records Service and Management of Government Records (DARSMGR), and some administrative rules. The Framework also includes a matur","cbCaipf5C1p67Dig","https://ap.wps.com/l/cbCaipf5C1p67Dig","pdf",957650,28,"English","# PRIVACY PROGRAM REPORT TEMPLATE\n## Utah Office of Data Privacy - Data Privacy - Version 1.1\n## DISCLAIMER\n## PRIVACY PROGRAM REPORT REQUIREMENT\n## DEFINITIONS AND VERSION HISTORY\n## SECTION 1: GOVERNMENTAL ENTITY INFORMATION\n## SECTION 2: PRIVACY PROGRAM STATUS\n## SECTION 3: PRIVACY PRACTICES, MATURITY AND STRATEGIES\n## PRIVACY MATURITY MODEL\n## PRIVACY PRACTICES IMPLEMENTED","[{\"question\":\"Who must prepare and certify the Privacy Program Report each year?\",\"answer\":\"The chief administrative officer (CAO) of the governmental entity must prepare and certify the Report before December 31 each year.\"},{\"question\":\"What does the template require for Section 2 on privacy program status?\",\"answer\":\"Section 2 requires the entity to indicate whether it has initiated a privacy program and, if so, how it was initiated (e.g., administrative rule, ordinance, resolution, policy, or other means).\"},{\"question\":\"How does the template define the privacy maturity model?\",\"answer\":\"The template provides maturity levels ranging from NON-EXISTENT through AD HOC, DEFINED, CONSISTENTLY IMPLEMENTED, MANAGED, and OPTIMIZED, describing how practices are embedded, documented, managed with metrics, and supported across the workforce.\"}]","Privacy-Program-Report - Version 1.1 - Template | PDF",1789271838,10]