Utah consumer data privacy act
Utah Code §§ 13-61-101 to 13-61-404 · Read 2026-08-15
Enacted 2022-03-24 and applicable from 2023-12-31. Scope threshold as written: Annual revenue of 25,000,000 dollars or more, together with a consumer volume threshold. No data protection assessment requirement and no right to correction in the text.
Identifier
- Identifier
- Utah Code §§ 13-61-101 to 13-61-404
- Level
- State UT
- Status
- In force
- Adopted
- 2022-03-24
- Applies from
- 2023-12-31
- Supervisory bodies
- Utah DCP
Named requirements
Applicability and thresholds
Utah Code §§ 13-61-101 to 13-61-404
Annual revenue of 25,000,000 dollars or more, together with a consumer volume threshold.
Privacy notice
Utah Code §§ 13-61-101 to 13-61-404
A reasonably accessible notice naming the categories processed, the purposes, the categories shared and how rights are exercised.
Consumer rights
Utah Code §§ 13-61-101 to 13-61-404
Access, deletion, portability and opt-out of targeted advertising, sale and certain profiling, with an appeal route.
Sensitive data
Utah Code §§ 13-61-101 to 13-61-404
Consent, or in some states a strict necessity standard, before sensitive categories are processed.
Data protection assessment
Utah Code §§ 13-61-101 to 13-61-404
A documented assessment for targeted advertising, sale, sensitive data and profiling that carries a heightened risk.
Processor contract
Utah Code §§ 13-61-101 to 13-61-404
A written contract that sets instructions, confidentiality, deletion or return, and audit rights.
Enforcement
Utah Code §§ 13-61-101 to 13-61-404
Enforced by the state authority. No data protection assessment requirement and no right to correction in the text.
Official source
EU acts on the same ground
- gdpr
Covers the same ground as the GDPR on notice, rights and processor contracts, with a narrower scope and no general lawful basis requirement.
Change monitoring
The row is re-read against the publisher's own publication on a fixed interval. The dates below can be checked on the spot and travel with the API response.
| Field | Value |
|---|---|
| Register | Utah DCP — Utah Code §§ 13-61-101 to 13-61-404 |
| Publisher | Utah Division of Consumer Protection |
| Last read | 2026-08-15 |
| Interval | Every 30 days |
| Next re-read | 2026-09-14 |
| Status | Checked against the publisher |
Row history
Dated events concerning this exact row, newest first. No event appears here without a date in a primary source.
| Date | Event | Source |
|---|---|---|
| 2026-08-15 | Row read against the official publication | Utah Division of Consumer Protection |
| 2023-12-31 | Date of application according to the publisher | Utah Division of Consumer Protection |
| 2022-03-24 | Adopted under Utah Code §§ 13-61-101 to 13-61-404 | Utah Division of Consumer Protection |
Monitoring states when the row was checked, not how the legal position should be assessed.
Cite this row
The string below travels with a memo, a case file or an agent chain. The same string sits in the citation field of the API response.
Utah Code §§ 13-61-101 to 13-61-404, Utah consumer data privacy act. ExploreWorld Legal, https://legal.exploreworldai.com/us/regler/utah-ucpa (hämtad 2026-08-25, bevis sha256:f1116c2323a94e38, bygge legal-2026-08-25).
- sha256:
- f1116c2323a94e38676a69ea98a5779aa3396e53a30ddfc64f134a7264113ac6
- hämtad:
- 2026-08-25
- source_confidence:
- derived
- bygge:
- legal-2026-08-25
- officiell källa:
- https://le.utah.gov/xcode/Title13/Chapter61/13-61.html
Derived path to the publisher. The address is built from the identifier and lands in the publisher's own register. le.utah.gov.
The row is a source reference with an official identifier. No legal advice and no compliance decision.
Verifiable trust signals
- Six fixed blocks, one source per line
- No sentence written by a language model
- Engine version and read date on every answer
- No customer data, no documents, no advice
- Model card and audit published under the EU AI Act