Representative A. Cory Maloy proposes the following substitute bill:


1     
NONPROFIT ENTITY AMENDMENTS

2     
2024 GENERAL SESSION

3     
STATE OF UTAH

4     
Chief Sponsor: A. Cory Maloy

5     
Senate Sponsor: Daniel McCay

6     

7     LONG TITLE
8     General Description:
9          This bill modifies provisions related to disclosure of nonprofit entity related personal
10     information by public agencies.
11     Highlighted Provisions:
12          This bill:
13          ▸     modifies definitions;
14          ▸     clarifies the individuals about whom personal information may not be disclosed;
15          ▸     amends the exemptions from the prohibition of disclosing personal information;
16          ▸     addresses damages; and
17          ▸     makes technical and conforming amendments.
18     Money Appropriated in this Bill:
19          None
20     Other Special Clauses:
21          None
22     Utah Code Sections Affected:
23     AMENDS:
24          63G-26-102, as last amended by Laws of Utah 2023, Chapter 16
25          63G-26-103, as last amended by Laws of Utah 2023, Chapter 33
26          63G-26-104, as enacted by Laws of Utah 2020, Chapter 393
27     

28     Be it enacted by the Legislature of the state of Utah:
29          Section 1. Section 63G-26-102 is amended to read:
30          63G-26-102. Definitions.
31          As used in this chapter:
32          (1) "Nonprofit entity" means an entity exempt from federal income tax under Section
33     501(c), Internal Revenue Code, or that has submitted an application with the Internal Revenue
34     Service for recognition of an exemption under Section 501(c), Internal Revenue Code.
35          (2) "Personal information" means a record or other compilation of data that identifies a
36     person as a donor to [an entity exempt from federal income tax under Section 501(c) of the
37     Internal Revenue Code] a nonprofit entity.
38          [(2)] (3) "Public agency" means a state or local government entity, including:
39          (a) a department, division, agency, office, commission, board, or other government
40     organization;
41          (b) a political subdivision, including a county, city, town, metro township, special
42     district, or special service district;
43          (c) a public school, school district, charter school, or public higher education
44     institution; or
45          (d) a judicial or quasi-judicial body.
46          Section 2. Section 63G-26-103 is amended to read:
47          63G-26-103. Protection of personal information.
48          (1) Except as provided in Subsections (2), (3), and [(5)] (4), a public agency may not:
49          (a) require an individual who is a donor to a nonprofit entity to provide the public
50     agency with personal information or otherwise compel the release of personal information;
51          (b) require [an entity exempt from federal income tax under Section 501(c) of the
52     Internal Revenue Code] a nonprofit entity to provide the public agency with personal
53     information or compel the nonprofit entity to release personal information;
54          (c) release, publicize, or otherwise publicly disclose personal information in possession
55     of a public agency; or
56          (d) request or require a current or prospective contractor or grantee of the public
57     agency to provide the public agency with a list of [entities exempt from federal income tax
58     under Section 501(c) of the Internal Revenue Code] nonprofit entities to which the current or
59     prospective contractor or grantee has provided financial or nonfinancial support.
60          (2) Subsection (1) does not apply to:
61          (a) a disclosure of personal information required under Title 20A, Election Code, or
62     Title 36, Chapter 11, Lobbyist Disclosure and Regulation Act[, or any other legal requirement
63     relating to reporting campaign contributions, campaign expenditures, lobbying disclosures, or
64     lobbying expenditures];
65          [(b) a disclosure of personal information expressly required by law;]
66          [(c)] (b) [a disclosure of personal information voluntarily made] the release of personal
67     information by a public agency if the information is voluntarily released to the public by the
68     individual or nonprofit entity to which the personal information relates, including:
69          (i) as part of public comment or in a public meeting; or
70          (ii) in another manner that is publicly accessible;
71          [(d)] (c) a disclosure of personal information pursuant to a lawful warrant or court
72     order issued by a court [of competent] with jurisdiction;
73          [(e)] (d) a lawful request for discovery of personal information in litigation or a
74     criminal proceeding if the court with jurisdiction:
75          (i) finds that the requestor demonstrates a compelling need for the personal information
76     by clear and convincing evidence; and
77          (ii) issues a protective order barring disclosure of personal information to a person not
78     named in the litigation;
79          (e) admission of personal information as relevant evidence before a court with
80     jurisdiction, except that a court may not publicly reveal personal information absent a specific
81     finding of good cause;
82          [(f) the use of personal information in a legal proceeding;]
83          [(g) a public agency sharing personal information with another public agency in
84     accordance with the requirements of law; or]
85          [(h)] (f) a nonprofit created under Title 11, Chapter 13a, Governmental Nonprofit
86     Corporations Act[.]; or
87          (g) disclosure of personal information to the Department of Financial Institutions to
88     conduct regulatory oversight of federally insured depositories to comply with the requirements
89     of statute, rule, or regulation.
90          (3) Subsections (1)(a), (b), and (d) do not apply to:
91          (a) administration or enforcement of Title 13, Chapter 11, Utah Consumer Sales
92     Practices Act, or Title 13, Chapter 22, Charitable Solicitations Act:
93          (i) including the required submission of Internal Revenue Service Form 990, excluding
94     Schedule B, to the Department of Commerce; and
95          (ii) except that the public agency may only use personal information in connection with
96     a specific administration or enforcement provision to which the request relates and for a related
97     proceeding;
98          (b) the request or use of personal information necessary to the State Tax Commission's
99     administration of tax or motor vehicle laws, except that the State Tax Commission may only
100     use personal information in connection with the administration of tax or motor vehicle laws or
101     for a related proceeding; or
102          (c) access to personal information by the Office of the Legislative Auditor General to
103     conduct an audit authorized under Utah Constitution, Article VI, Section 33, and Section
104     36-12-15, or the state auditor's office to conduct an audit authorized under Title 67, Chapter 3,
105     Auditor, except the legislative auditor general or state auditor may only use the personal
106     information in connection with the specific audit to which the request relates.
107          [(4) A court shall consider whether to:]
108          [(a) limit a request for discovery of personal information; or]
109          [(b) issue a protective order in relation to the disclosure of personal information
110     obtained or used in relation to a legal proceeding.]
111          [(5)] (4) Subsection (1) does not apply to disclosure of a contributor to a sponsoring
112     organization, as those terms are defined in Section 41-1a-1601.
113          Section 3. Section 63G-26-104 is amended to read:
114          63G-26-104. Enforcement -- Penalty.
115          (1) (a) A person whose personal information is provided or disclosed in violation of
116     this chapter may bring a civil action for appropriate injunctive relief, damages, or both.
117          (b) When a court awards damages under this section, the court shall order:
118          (i) an amount of not less than $2,500 to compensate for injury or loss caused by each
119     violation of this chapter; or
120          (ii) for an intentional violation of this chapter, an amount not to exceed three times the
121     amount described in Subsection (1)(b)(i).
122          (2) A court may award court costs and attorney fees to a person that brings an action
123     described in Subsection (1) if the person prevails in that action.
124          (3) A person that knowingly violates a provision of Section 63G-26-103 is guilty of a
125     class C misdemeanor, punishable by imprisonment for not more than 90 days or a fine of not
126     more than $1,000, or both.
127          Section 4. Effective date.
128          This bill takes effect on May 1, 2024.