Skip to main content

Privacy Notice - Utah

Last updated: December 29, 2023

Maximus, Inc. and its subsidiaries (We, Us, Our) provide this privacy notice (Notice) for Utah consumers. This notice only applies to persons (Consumer, You, Your) who live in the state of Utah and explains the rights of Utah residents under the Utah Consumer Privacy Act (UCPA) and other Utah privacy laws. Terms defined in this notice have the same meaning as in the UCPA.


Categories of personal data we process
Business reasons we process personal data
Personal data we share with third parties
Personal data we use or sell for targeted advertising
Your rights regarding your personal data
How to exercise your consumer rights

Changes to this notice
How to contact us


Consumer:  means an individual who is a resident of the state acting in an individual or household context.

Controller:  means a person doing business in the state who determines the purposes for which and the means by which personal data are processed, regardless of whether the person makes the determination alone or with others.

Processor:  means a person who processes personal data on behalf of a controller.

Return to Contents

Categories of personal data we collect / process

We collect the data categories below that are linked or could reasonably be linked to an identified or identifiable natural person (personal data):



Personal data

Unique identifiers such as name, alias, postal address, Internet Protocol (IP) address, email address, Social Security number, telephone number, or other such identifiers

Sensitive data

Personal data revealing racial or ethnic origin; religious beliefs; sexual orientation; citizenship or immigration status; medical history, mental or physical condition, or medical treatment or diagnosis by a health care progression; genetic or biometric data if the process is for the purpose of identifying that specific individual

Return to Contents

Business reasons we use (process) personal data

We collect consumer personal data for one or more of the following  business reasons (not a complete list):

 Business reason


Support our everyday operations, including to meet risk, legal, and compliance requirements 

  • Comply with federal, state, or local laws, rules, or regulations
  • Comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by federal, state, local, or other governmental authorities
  • Cooperate with law-enforcement agencies about conduct or activity we reasonably and in good faith believe may violate federal, state, or local laws, rules, or regulations
  • Investigate, establish, exercise, prepare for, or defend legal claims
  • Take immediate steps to protect an interest essential for the consumer’s or other natural person’s life or physical safety, and where the processing cannot be clearly based on another legal basis
  • Prevent, detect, protect against, or respond to privacy and security incidents, identity theft, fraud, harassment, malicious or deceptive activities, or any illegal activity; preserve the integrity or security of systems; or investigate, report, or prosecute those responsible for any such action
  • Perform accounting, monitoring, and reporting 
  • Manage privacy and information security activities 
  • Engage service providers  
  • Comply with Maximus and client policies, procedures, and contractual obligations 

Manage, improve, and develop our business 

  • Improve our website and present its contents
  • Test, analyze, and develop products
  • Support customer relationship management 
  • Evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information we hold is among the assets transferred

Provide information to consumers 

  • Fulfil or meet the reason you gave us the information
  • Provide information, products, or services you ask us for
  • Provide email or text alerts, event registrations, and other notices about our products, services, events, or news that may interest you

Return to Contents

Personal data we share with third parties

Third party” means a person other than the consumer, controller, or processor; or an affiliate or contractor of the controller or the processor.

We do not disclose consumer personal data to third parties. In the event we do share personal data with a third party, we will update this privacy notice. When we share personal data with a third party, we enter into contract that describe the business purpose. The contract requires the third party to keep that personal information confidential and not use it for any purpose except to perform services under the contract.

Return to Contents

Personal data we use or sell for targeted advertising

We do not use or sell personal data for targeted advertising.

Return to Contents

Your rights regarding your personal data

The UCPA gives you these rights regarding your personal data:

Right to


Know / Access

You have the right to confirm whether we process your personal data and to access that data.


You have the right to delete personal data that you directly provided to us.

Data portability

You have the right to obtain a copy of your personal data that you gave us in a format that is portable and readily usable (to the extent technically feasible and practicable) and that allows you to transmit the data to another controller without obstruction, where processing is automated


You have the right to opt-out of the processing of your personal data for purposes of (i) targeted advertising, or (ii) the sale of personal data

Return to Contents

How to exercise your consumer rights

Return to Contents

How to make a request

If you are a Utah consumer and want to exercise your rights, send your request using How to contact us below. To act on your request, you must provide us with:

Enough information to identify you, such as:

  • Your full name
  • Email address
  • Mailing address
  • Business name
  • Business email address
  • Business address name
  • Date of last contact
  • Reason you gave Maximus the personal data

Do not give us your Social Security number.

  • Proof of your identity and address (e.g., a copy of a recent utility bill)
  • A description of what right you want to exercise and the information to which it relates

If you are a parent or legal guardian submitting a request for a minor child, please include your relationship to the minor child.

We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected the information (or is someone authorized to act on such person’s behalf).

Personal information we collect from you to verify your identity in connection with your request will be used only for verification purposes.

Return to Contents

How we respond to your request

We will respond to your request within 45 days. If we cannot verify your identity in that time, we may deny your request. We will notify you during that time if we need more time (up to 45 calendar days) to respond to your request.

Some information is exempt from UCPA. This includes employment information and information subject to certain federal privacy laws such as the Gramm-Leach-Bliley Act (GLBA) and the Health Insurance Portability and Accountability Act (HIPAA).

Other laws may also affect our ability to comply with your request. State or federal laws requiring that we keep certain information may prevent us from granting your request to delete it. We may decline all or part of your request.

We will respond to your verifiable request free of charge once within a 12-month period.  We may deny your request or charge a reasonable fee for clearly unfounded, excessive, or repeated requests. If we decide your request requires a fee, we will tell you why. We will give you a cost estimate before we complete your request.

Return to Contents

Changes to this notice

We reserve the right to change this notice at any time. When we do, we will post the revised notice on this webpage with the date of last update.

Return to Contents

How to contact us

If you have questions or comments about this notice, or would like to make a request regarding your rights, contact us at: 

Phone: 1-833-953-3696

Return to Contents