Statewide commitment database -- Restricted use and access

(1) As used in this section: (a) "Committed individual" means an individual who has been committed under Section 26B-5-331, 26B-5-332, or 26B-5-351. (b) "Committee" means the Health and Human Services Interim Committee. (2) The department shall establish by December 31, 2026, and shall maintain, a database of individuals committed under Sections 26B-5-331, 26B-5-332, and 26B-5-351. (3) The database shall include: (a) the name and identifying information of a committed individual; (b) the type of commitment and statute authorizing the commitment; (c) the status of the committed individual; and (d) any other information the department deems necessary to carry out the requirements of this section. (4) The department shall make rules in accordance with Title 63G, Chapter 3, Utah Administrative Rulemaking Act, to: (a) implement this section; (b) ensure the privacy of committed individuals, including by: (i) establishing and restricting the permissible uses of the information in the database; (ii) defining and restricting access to the database, including by identifying persons who may have access to the database; and (iii) ensuring the system contains tools for: (A) logging; (B) data loss prevention; (C) identity management; and (D) access management, including role-based access; and (c) permit local mental health authorities to access civil commitments within the local mental health authority's authority area. (5) At or before the committee's November 2026 meeting, the department shall report to the committee on the department's rules made in accordance with Subsection (4)(b) to ensure the privacy of committed individuals.