Utah consumer data privacy act

Beteckning

Beteckning

Utah Code §§ 13-61-101 to 13-61-404

Nivå

Delstat UT

Status

I kraft

Antagen

2022-03-24

Tillämpas från

2023-12-31

Tillsynsorgan

Utah DCP

Namngivna krav

• Applicability and thresholds

  Utah Code §§ 13-61-101 to 13-61-404

  Annual revenue of 25,000,000 dollars or more, together with a consumer volume threshold.

• Privacy notice

  Utah Code §§ 13-61-101 to 13-61-404

  A reasonably accessible notice naming the categories processed, the purposes, the categories shared and how rights are exercised.

• Consumer rights

  Utah Code §§ 13-61-101 to 13-61-404

  Access, deletion, portability and opt-out of targeted advertising, sale and certain profiling, with an appeal route.

• Sensitive data

  Utah Code §§ 13-61-101 to 13-61-404

  Consent, or in some states a strict necessity standard, before sensitive categories are processed.

• Data protection assessment

  Utah Code §§ 13-61-101 to 13-61-404

  A documented assessment for targeted advertising, sale, sensitive data and profiling that carries a heightened risk.

• Processor contract

  Utah Code §§ 13-61-101 to 13-61-404

  A written contract that sets instructions, confidentiality, deletion or return, and audit rights.

• Enforcement

  Utah Code §§ 13-61-101 to 13-61-404

  Enforced by the state authority. No data protection assessment requirement and no right to correction in the text.

Officiell källa

• le.utah.gov
• dcp.utah.gov

EU-rättsakter på samma område

• gdpr

  Täcker samma mark som dataskyddsförordningen när det gäller information, rättigheter och biträdesavtal, men med smalare tillämpning och utan ett allmänt krav på rättslig grund.