03-07 09:37 2nd Sub. (Salmon) S.B. 154 Anthony E. Loubet proposes the following substitute bill: 1 Legislative Audit Amendments 2025 GENERAL SESSION STATE OF UTAH Chief Sponsor: Brady Brammer House Sponsor: Jordan D. Teuscher 2 3 LONG TITLE 4 General Description: 5 This bill enacts provisions related to certain information provided to the legislative auditor 6 general. 7 Highlighted Provisions: 8 This bill: 9 ▸ restates the authority of the legislative auditor general; 10 ▸ excludes certain information provided to the legislative auditor general from the 11 definition of "record"; 12 ▸ permits an entity to provide certain privileged items to the legislative auditor general; 13 ▸ requires an entity that withholds certain privileged items from the legislative auditor 14 general to expressly assert a privilege; 15 ▸ permits the legislative auditor general to contest a privilege claim; 16 ▸ requires, in certain circumstances, an entity to submit privileged items to an arbitrator to 17 determine a privilege claim; 18 ▸ coordinates enactment of provisions with S.J.R. 4, Joint Resolution Amending Court 19 Rules on Attorney Confidentiality; and 20 ▸ makes technical corrections. 21 Money Appropriated in this Bill: 22 None 23 Other Special Clauses: 24 This bill provides a coordination clause. 25 Utah Code Sections Affected: 26 AMENDS: 27 36-12-15, as last amended by Laws of Utah 2024, Third Special Session, Chapter 3 28 Utah Code Sections affected by Coordination Clause: 2nd Sub. S.B. 154 2nd Sub. (Salmon) S.B. 154 03-07 09:37 29 36-12-15, as last amended by Laws of Utah 2024, Third Special Session, Chapter 3 30 31 Be it enacted by the Legislature of the state of Utah: 32 The following section is affected by a coordination clause at the end of this bill. 33 Section 1. Section 36-12-15 is amended to read: 34 36-12-15 . Office of the Legislative Auditor General established -- Qualifications 35 -- Powers, functions, and duties -- Reporting -- Criminal penalty -- Employment. 36 (1) As used in this section: 37 (a) "Audit action" means an audit, examination, investigation, or review of an entity 38 conducted by the office. 39 (b) "Entity" means: 40 (i) a government organization; or 41 (ii) a receiving organization. 42 (c) "Government organization" means: 43 (i) a state branch, department, or agency; or 44 (ii) a political subdivision, including a county, municipality, special district, special 45 service district, school district, interlocal entity as defined in Section 11-13-103, 46 or any other local government unit. 47 (d) "Office" means the Office of the Legislative Auditor General. 48 (e) "Receiving organization" means an organization that receives public funds that is not 49 a government organization. 50 (2)(a) There is created the Office of the Legislative Auditor General as a permanent staff 51 office for the Legislature. 52 (b) The authority of the legislative auditor general is: 53 (i) established in Utah Constitution, Article VI, Section 33; and 54 (ii) an extension of the Legislature's inherent inquiry and investigatory power. 55 (3) The legislative auditor general shall be a licensed certified public accountant or certified 56 internal auditor with at least seven years of experience in the auditing or public 57 accounting profession, or the equivalent, prior to appointment. 58 (4) The legislative auditor general shall appoint and develop a professional staff within 59 budget limitations. 60 (5) The office shall exercise the constitutional authority provided in Utah Constitution, 61 Article VI, Section 33. 62 (6) Under the direction of the legislative auditor general, the office shall: - 2 - 03-07 09:37 2nd Sub. (Salmon) S.B. 154 63 (a) conduct comprehensive and special purpose audits, examinations, investigations, or 64 reviews of entity funds, functions, and accounts; 65 (b) prepare and submit a written report on each audit action to the Audit Subcommittee 66 created in Section 36-12-8 and make the report available to all members of the 67 Legislature within 75 days after the audit action is completed; 68 (c) monitor, conduct a risk assessment of, or audit any efficiency evaluations that the 69 legislative auditor general determines necessary, in accordance with Title 63J, 70 Chapter 1, Part 9, Government Performance Reporting and Efficiency Process, and 71 legislative rule; 72 (d) create, manage, and report to the Audit Subcommittee a list of high risk programs 73 and operations that: 74 (i) threaten public funds or programs; 75 (ii) are vulnerable to inefficiency, waste, fraud, abuse, or mismanagement; or 76 (iii) require transformation; 77 (e) monitor and report to the Audit Subcommittee the health of a government 78 organization's internal audit functions; 79 (f) make recommendations to increase the independence and value added of internal 80 audit functions throughout the state; 81 (g) implement a process to track, monitor, and report whether the subject of an audit has 82 implemented recommendations made in the audit report; 83 (h) establish, train, and maintain individuals within the office to conduct investigations 84 and represent themselves as lawful investigators on behalf of the office; 85 (i) establish policies, procedures, methods, and standards of audit work and 86 investigations for the office and staff; 87 (j) prepare and submit each audit and investigative report independent of any influence 88 external of the office, including the content of the report, the conclusions reached in 89 the report, and the manner of disclosing the legislative auditor general's findings; 90 (k) prepare and submit the annual budget request for the office; and 91 (l) perform other duties as prescribed by the Legislature. 92 (7) In conducting an audit action of an entity, the office may include a determination of any 93 or all of the following: 94 (a) the honesty and integrity of any of the entity's fiscal affairs; 95 (b) the accuracy and reliability of the entity's internal control systems and specific 96 financial statements and reports; - 3 - 2nd Sub. (Salmon) S.B. 154 03-07 09:37 97 (c) whether or not the entity's financial controls are adequate and effective to properly 98 record and safeguard the entity's acquisition, custody, use, and accounting of public 99 funds; 100 (d) whether the entity's administrators have complied with legislative intent; 101 (e) whether the entity's operations have been conducted in an efficient, effective, and 102 cost efficient manner; 103 (f) whether the entity's programs have been effective in accomplishing intended 104 objectives; and 105 (g) whether the entity's management control and information systems are adequate and 106 effective. 107 (8)(a) If requested by the office, each entity that the legislative auditor general is 108 authorized to audit under Utah Constitution, Article VI, Section 33, or this section 109 shall, notwithstanding any other provision of law except as provided in Subsection 110 (8)(b), provide the office with access to information, materials, or resources the office 111 determines are necessary to conduct an audit, examination, investigation, or review, 112 including: 113 (i) the following in the possession or custody of the entity in the format identified by 114 the office: 115 (A) a record, document, and report; and 116 (B) films, tapes, recordings, and electronically stored information; 117 (ii) entity personnel; and 118 (iii) each official or unofficial recording of formal or informal meetings or 119 conversations to which the entity has access. 120 (b) To the extent compliance would violate federal law, the requirements of Subsection 121 (8)(a) do not apply. 122 (9)(a) In carrying out the duties provided for in this section and under Utah Constitution, 123 Article VI, Section 33, the legislative auditor general may issue a subpoena to access 124 information, materials, or resources in accordance with Chapter 14, Legislative 125 Subpoena Powers. 126 (b) The legislative auditor general may issue a subpoena, as described in Subsection 127 (9)(a), to a financial institution or any other entity to obtain information as part of an 128 investigation of fraud, waste, or abuse, including any suspected malfeasance, 129 misfeasance, or nonfeasance involving public funds. 130 (10)(a) As used in this Subsection (10): - 4 - 03-07 09:37 2nd Sub. (Salmon) S.B. 154 131 (i) "Bad faith" means an action or inaction that is unambiguously not authorized 132 under an authority described in Subsection (10)(a)(iii)(A), (B), or (C). 133 (ii) "Item" means information, materials, or resources described in Subsection (8)(a). 134 (iii) "Privileged item" means an item that is an attorney-client communication, 135 attorney work product, or information relating to representation of the entity, 136 governed by: 137 (A) Utah Rules of Professional Conduct, Rule 1.6; 138 (B) Utah Rules of Evidence, Rule 504; or 139 (C) Utah Rules of Civil Procedure, Rule 26. 140 (b) If an entity discloses information to the legislative auditor general that is confidential 141 under Utah Rules of Professional Conduct, Rule 1.6, the disclosure is authorized in 142 accordance with Utah Rules of Professional Conduct, Rule 1.6(b)(6), and does not 143 make the information discoverable or prevent the entity from claiming that the 144 information is privileged in another proceeding. 145 (c) If requested by the legislative auditor general for an audit action, an entity may 146 provide a privileged item. 147 (d) If an entity withholds an item after a request by the legislative auditor general for an 148 audit action, the entity shall, for each instance in which the entity asserts privilege, 149 submit to the legislative auditor general a written statement: 150 (i) expressly asserting the privilege and the authority for the privilege claim; and 151 (ii) for each privilege claim, describing the nature of the item in a manner that, 152 without revealing the attorney-client communication, attorney work product, or 153 representation information itself, enables the legislative auditor general to evaluate 154 the privilege claim. 155 (e) The legislative auditor general may contest a privilege claim asserted under 156 Subsection (10)(d) by: 157 (i) notifying the entity in writing of each contested privilege claim and providing the 158 list of available arbitrators described in Subsection (10)(f); and 159 (ii) submitting each contested privilege claim to the arbitrator selected in accordance 160 with Subsection (10)(f). 161 (f)(i) The legislative auditor general shall: 162 (A) maintain a list of three arbitrators; and 163 (B) engage an arbitrator selected in accordance with this Subsection (10)(f). 164 (ii) No later than three business days after receiving the notification under Subsection - 5 - 2nd Sub. (Salmon) S.B. 154 03-07 09:37 165 (10)(e)(i), the entity may select an arbitrator from the list provided by the 166 legislative auditor general. 167 (iii) If an entity fails to select an arbitrator in accordance with Subsection (10)(f)(ii), 168 the legislative auditor general shall select an arbitrator from the list. 169 (iv) The arbitrator shall be licensed to practice law in the state of Utah and in good 170 standing. 171 (v) Subject to Subsection (10)(i)(ii), the entity and the legislative auditor general shall 172 equally bare the cost of the arbitrator. 173 (g) The entity: 174 (i) shall provide to the arbitrator the item and contested privilege claim no later than 175 seven business days after the arbitrator is engaged under Subsection (10)(f); and 176 (ii) may provide supplemental information in support of a privilege claim. 177 (h) No later than seven business days after the arbitrator receives the contested privilege 178 claim under Subsection (10)(g)(i), the arbitrator shall: 179 (i) conduct an in camera review of each contested item and the authority for the 180 relevant privilege claim; 181 (ii) review supplemental information submitted under Subsection (10)(g)(ii) and any 182 supplemental information provided by the legislative auditor general; 183 (iii) issue a determination as to whether the entity has a valid claim of privilege, 184 favoring access to the legislative auditor general of material that is not privileged; 185 and 186 (iv) issue a determination as to whether the entity acted in bad faith. 187 (i)(i) If the arbitrator determines that an entity does not have a valid privilege claim, 188 the entity shall provide the withheld item to the legislative auditor general 189 immediately. 190 (ii) If the arbitrator determines that the entity acted in bad faith, the entity shall bare 191 the full cost of the arbitrator. 192 (j) The arbitrator may not disclose: 193 (i) a privileged item; or 194 (ii) supplemental information described in Subsection (10)(g)(ii). 195 (k) Provisions of this Subsection (10) are not subject to Title 78B, Chapter 11, Utah 196 Uniform Arbitration Act. 197 [(10)] (11) To preserve the professional integrity and independence of the office: 198 (a) no legislator or public official may urge the appointment of any person to the office; - 6 - 03-07 09:37 2nd Sub. (Salmon) S.B. 154 199 and 200 (b) the legislative auditor general may not be appointed to serve on any board, authority, 201 commission, or other agency of the state during the legislative auditor general's term 202 as legislative auditor general. 203 [(11)] (12)(a) The following records in the custody or control of the legislative auditor 204 general are protected records under Title 63G, Chapter 2, Government Records 205 Access and Management Act: 206 (i) records and audit work papers that would disclose information relating to 207 allegations of personal misconduct, gross mismanagement, or illegal activity of a 208 past or present governmental employee if the information or allegation cannot be 209 corroborated by the legislative auditor general through other documents or 210 evidence, and the records relating to the allegation are not relied upon by the 211 legislative auditor general in preparing a final audit report; 212 (ii) records and audit workpapers that would disclose the identity of a person who, 213 during the course of a legislative audit, communicated the existence of: 214 (A) unethical behavior; 215 (B) waste of public funds, property, or personnel; or 216 (C) a violation or suspected violation of a United States, Utah state, or political 217 subdivision law, rule, ordinance, or regulation, if the person disclosed on the 218 condition that the identity of the person be protected; 219 (iii) before an audit is completed and the final audit report is released, records or 220 drafts circulated to a person who is not an employee or head of an entity for 221 review, response, or information; 222 (iv) records that would disclose: 223 (A) an outline; 224 (B) all or part of an audit survey, audit risk assessment plan, or audit program; or 225 (C) other procedural documents necessary to fulfill the duties of the office; and 226 (v) requests for audits, if disclosure would risk circumvention of an audit. 227 (b) The provisions of Subsection [(11)(a) ] (12)(a) do not prohibit the disclosure of 228 records or information to a government prosecutor or peace officer if those records or 229 information relate to a violation of the law by an entity or entity employee. 230 (c) A record, as defined in Section 63G-2-103, created by the office in a closed meeting 231 held in accordance with Section 52-4-205: 232 (i) is a protected record, as defined in Section 63G-2-103; - 7 - 2nd Sub. (Salmon) S.B. 154 03-07 09:37 233 (ii) to the extent the record contains information: 234 (A) described in Section 63G-2-302, is a private record; or 235 (B) described in Section 63G-2-304, is a controlled record; and 236 (iii) may not be reclassified by the office. 237 (d) The provisions of this section do not limit the authority otherwise given to the 238 legislative auditor general to maintain the private, controlled, or protected record 239 status of a shared record in the legislative auditor general's possession or classify a 240 document as public, private, controlled, or protected under Title 63G, Chapter 2, 241 Government Records Access and Management Act. 242 (e) If provided to the legislative auditor general, the following are not a record, as 243 defined in Section 63G-2-103: 244 (i) a privileged item, as defined in Subsection (10)(a); and 245 (ii) supplemental information described in Subsection (10)(g)(ii). 246 [(12)] (13) The legislative auditor general shall: 247 (a) be available to the Legislature and to the Legislature's committees for consultation on 248 matters relevant to areas of the legislative auditor general's professional competence; 249 (b) conduct special audits as requested by the Audit Subcommittee; 250 (c) report immediately to the Audit Subcommittee any apparent violation of penal 251 statutes disclosed by the audit of an entity and furnish to the Audit Subcommittee all 252 information relative to the apparent violation; 253 (d) report immediately to the Audit Subcommittee any apparent instances of 254 malfeasance or nonfeasance by an entity officer or employee disclosed by the audit of 255 an entity; and 256 (e) make any recommendations to the Audit Subcommittee with respect to the alteration 257 or improvement of the accounting system used by an entity. 258 [(13)] (14) If the legislative auditor general conducts an audit of an entity that has 259 previously been audited and finds that the entity has not implemented a recommendation 260 made by the legislative auditor general in a previous audit report, the legislative auditor 261 general shall report to the Audit Subcommittee that the entity has not implemented the 262 recommendation. 263 [(14)] (15) Before each annual general session, the legislative auditor general shall: 264 (a) prepare an annual report that: 265 (i) summarizes the audits, examinations, investigations, and reviews conducted by the 266 office since the last annual report; and - 8 - 03-07 09:37 2nd Sub. (Salmon) S.B. 154 267 (ii) evaluate and report the degree to which an entity that has been the subject of an 268 audit has implemented the audit recommendations; 269 (b) include in the report any items and recommendations that the legislative auditor 270 general believes the Legislature should consider in the annual general session; and 271 (c) deliver the report to the Legislature and to the appropriate committees of the 272 Legislature. 273 [(15)] (16)(a) If the chief officer of an entity has actual knowledge or reasonable cause to 274 believe that there is misappropriation of the entity's public funds or assets, or another 275 entity officer has actual knowledge or reasonable cause to believe that the chief 276 officer is misappropriating the entity's public funds or assets, the chief officer or, 277 alternatively, the other entity officer, shall immediately notify, in writing: 278 (i) the office; 279 (ii) the attorney general, county attorney, or district attorney; and 280 (iii)(A) for a state government organization, the chief executive officer; 281 (B) for a political subdivision government organization, the legislative body or 282 governing board; or 283 (C) for a receiving organization, the governing board or chief executive officer 284 unless the chief executive officer is believed to be misappropriating the funds 285 or assets, in which case the next highest officer of the receiving organization. 286 (b) As described in Subsection [(15)(a)] (16)(a), the entity chief officer or, if applicable, 287 another entity officer, is subject to the protections of Title 67, Chapter 21, Utah 288 Protection of Public Employees Act. 289 (c) If the Office of the Legislative Auditor General receives a notification under 290 Subsection [(15)(a)] (16)(a) or other information of misappropriation of public funds 291 or assets of an entity, the office shall inform the Audit Subcommittee. 292 (d) The attorney general, county attorney, or district attorney shall notify, in writing, the 293 Office of the Legislative Auditor General whether the attorney general, county 294 attorney, or district attorney pursued criminal or civil sanctions in the matter. 295 [(16)] (17)(a) An actor commits interference with a legislative audit if the actor uses 296 force, violence, intimidation, or engages in any other unlawful act with a purpose to 297 interfere with: 298 (i) a legislative audit action; or 299 (ii) the office's decisions relating to: 300 (A) the content of the office's report; - 9 - 2nd Sub. (Salmon) S.B. 154 03-07 09:37 301 (B) the conclusions reached in the office's report; or 302 (C) the manner of disclosing the results and findings of the office. 303 (b) A violation of Subsection [(16)(a)] (17)(a) is a class B misdemeanor. 304 [(17)] (18)(a) The office may require any current employee, or any applicant for 305 employment, to submit to a fingerprint-based local, regional, and criminal history 306 background check as an ongoing condition of employment. 307 (b) An employee or applicant for employment shall provide a completed fingerprint card 308 to the office upon request. 309 (c) The office shall require that an individual required to submit to a background check 310 under this Subsection [(17)] (18) also provide a signed waiver on a form provided by 311 the office that meets the requirements of Subsection 53-10-108(4). 312 (d) For a noncriminal justice background search and registration in accordance with 313 Subsection 53-10-108(13), the office shall submit to the Bureau of Criminal 314 Identification: 315 (i) the employee's or applicant's personal identifying information and fingerprints for 316 a criminal history search of applicable local, regional, and national databases; and 317 (ii) a request for all information received as a result of the local, regional, and 318 nationwide background check. 319 [(18)] (19) Subject to prioritization of the Legislative Audit Subcommittee, the Office of the 320 Legislative Auditor General shall conduct a feasibility study under Section 53G-3-301.1, 321 53G-3-301.3, or 53G-3-301.4. 322 Section 2. Effective Date. 323 This bill takes effect on May 7, 2025. 324 Section 3. Coordinating S.B. 154 with S.J.R. 4 if S.J.R. 4 does not pass. 325 If S.J.R. 4, Joint Resolution Amending Court Rules on Attorney Confidentiality, does 326 not pass, the Legislature intends that S.B. 154, Legislative Audit Amendments, not be enrolled 327 and not become law. - 10 -