In March 2022, Utah’s Consumer Privacy Bill passed the State House. The Bill still has several hurdles to jump through before becoming law. Leaders from both legislative chambers will need to provide their signatures before the 2022 session adjournment on 4 March 2022.
Utah’s Consumer Privacy Bill commencement date
It is still a Bill that enacts the Utah Consumer Privacy Act and takes effect on 31 December 2023. On 24 March 2022, The Utah State Governor signed the Senate Bill.
What is the Bill about?
The law seeks to protect and enforce consumers’ access, deletion, and data portability rights. It also provides for a consumer’s right to opt-out of targeted advertising and sale of personal data.
Utah’s Attorney General will have the exclusive authority to enforce the Consumer Privacy Act.
Who must comply with the UCPA?
Only a limited number of organisations need to comply. It is essentially only very large businesses or businesses that make money off personal information. A business only needs to comply with the UCPA if it:
- conducts business in the state or produces a product or service targeted to consumers who are residents of the state;
- has annual gross revenues exceeding $25,000,000; and
- processes, for commercial purposes, alone or in combination, the personal information of 50,000 or more consumers, households, or devices during one calendar year, or
- derives 50 percent or more of its annual revenues from selling consumers’ personal information.
Finding out more
You can read the full text of Utah’s Consumer Privacy Act on the Utah state legislature’s website.