Utah Consumer Privacy Act Overview
Create an account
Join our community for free to access exclusive whitepapers, reports, and regulatory information.
Utah became the fourth state to pass a comprehensive privacy law in the US when the Utah Consumer Privacy Act (UCPA) was signed into law in March 2022. The UCPA, also known as Senate Bill 227, grants Utah residents new privacy rights while imposing obligations on businesses to comply with the law's requirements. While similar in scope to other comprehensive privacy laws passed in other states, the UCPA's provisions differ in certain respects.
What is the UCPA?
The UCPA is a comprehensive privacy law in Utah that aims to enhance the protections given to individuals over how their personal information is used by organizations. The UCPA has a similar scope to other state privacy laws and also includes Sensitive personal information as a category of personal information with specific conditions for its use.
Like other states, Utah's comprehensive privacy law includes several consumer rights including the right to access, deletion, and to opt-out in certain circumstances. Enforcement of the UCPA will be the exclusive domain of the Attorney General. The UCPA will come into effect at the end of 2023, giving businesses time to prepare for compliance.
Key compliance areas under the UCPA
In many aspects, the UCPA is narrower than other state privacy laws in the US. While the UCPA does grant individuals a range of consumer rights as well as placing obligations on the data controller to present clear and accessible privacy notices, there is no requirement for data protection assessments.
Organizations covered by the UCPA will need to focus on:
- Reasonable safeguards for personal data
- Accessible privacy notices
- Vendor contracts
- Valid consent
- Conditions for processing sensitive personal information
Utah Consumer Privacy Act Overview infographic
Download the OneTrust DataGuidance overview infographic to find out more about key compliance areas under the UCPA, including:
- Scope
- Exclusions
- Key definitions
- Consumer rights
- Enforcement
The UCPA will enter into effect on December 31, 2023, giving organizations covered by the law time to implement the appropriate solutions and policies. Download the infographic for an overview of the UCPA’s requirements or request a demo to see how OneTrust DataGuidance can help you have a deeper understanding of these requirements.
