What is Utah Consumer Privacy Act?

The Utah Consumer Privacy Act (UCPA) is a US state privacy law that gives Utah residents more control over their personal data collected by businesses. It goes into effect on December 31, 2023.

UCPA applies to for-profit companies that have over $25 million in annual revenue and process personal data of at least 100,000 Utah consumers per year. It defines personal data broadly as any information linked to an identified individual.

Key Requirements:

  • Provide transparent privacy notices
  • Establish reasonable data security
  • Obtain consent for sensitive/child data
  • Allow opt-outs from data sales & targeted ads
  • Don’t discriminate against right-exercising consumers

It also grants several rights to consumers, such as:

  • Right to be informed about personal data
  • Right to access personal data
  • Right to delete certain personal data
  • Right to obtain data in a portable format
  • Right to opt out of processing for ads/sales

UCPA violations can result in businesses having to pay monetary damages to impacted consumers as well as civil penalties of up to $7,500 per violation to the state.

Check out how you can comply with the Utah Consumer Privacy Act.