The results of a recent audit in Utah showed that 66% of organizations failed to meet a requirement of the state's privacy statute.