What is Utah Consumer Privacy Act?
The Utah Consumer Privacy Act (UCPA) is a US state privacy law that gives Utah residents more control over their personal data collected by businesses. It goes into effect on December 31, 2023.
UCPA applies to for-profit companies that have over $25 million in annual revenue and process personal data of at least 100,000 Utah consumers per year. It defines personal data broadly as any information linked to an identified individual.
- Provide transparent privacy notices
- Establish reasonable data security
- Obtain consent for sensitive/child data
- Allow opt-outs from data sales & targeted ads
- Don’t discriminate against right-exercising consumers
It also grants several rights to consumers, such as:
- Right to be informed about personal data
- Right to access personal data
- Right to delete certain personal data
- Right to obtain data in a portable format
- Right to opt out of processing for ads/sales
UCPA violations can result in businesses having to pay monetary damages to impacted consumers as well as civil penalties of up to $7,500 per violation to the state.
Check out how you can comply with the Utah Consumer Privacy Act.