Utah is poised to become the fourth state to pass comprehensive consumer privacy legislation, after California, Virginia, and Colorado. The Utah Consumer Privacy Act (UCPA) was approved by the Utah House of Representatives on March 2 after clearing Senate approval last week. If enacted, the UCPA would take effect on December 31, 2023.
The UCPA would impose data protection obligations on those who process the personal data of Utah residents. It would also afford Utah residents corresponding rights and remedies. Enforcement would be handled by the Utah Attorney General and provides a 30-day cure period. The law does not contain a private right of action or require data processing impact assessments.
To read the full alert, click here