Utah is poised to become the fourth state to pass comprehensive
consumer privacy legislation, after California, Virginia, and
Colorado. The Utah Consumer Privacy Act (UCPA) was approved by the
Utah House of Representatives on March 2 after clearing Senate
approval last week. If enacted, the UCPA would take effect on
December 31, 2023.
The UCPA would impose data protection obligations on those who
process the personal data of Utah residents. It would also afford
Utah residents corresponding rights and remedies. Enforcement would
be handled by the Utah Attorney General and provides a 30-day cure
period. The law does not contain a private right of action or
require data processing impact assessments.
