Utah Consumer Privacy Act Joins the Growing List of Comprehensive State Privacy Laws
Following in the footsteps of California, Virginia and Colorado, Utah has become the fourth state in the United States to enact a comprehensive consumer privacy law. Governor Spencer Cox signed the Utah Consumer Privacy Act (UCPA) into law on March 24, 2022. The new law will go into effect on December 31, 2023, shortly after the effective dates of new privacy laws in California, Virginia and Colorado.
Threshold RequirementsThe UCPA applies to “any controller or processor” that conducts business in the state or produces products or services targeted to state residents, and that controls or process the personal data of at least:
- 100,000 consumers during a calendar year; or 25,000 consumers and derives over 50 percent of gross revenue from the “sale” (defined below) of personal data.
- 25,000 consumers and derives over 50 percent of gross revenue from the “sale” (defined below) of personal data.