Utah is set to become the fourth U.S. state to pass comprehensive data privacy legislation. Senate Bill 227, known as the Utah Consumer Privacy Act (“UCPA” or the “Act”), unanimously passed the Utah House of Representatives on March 3, 2022, after passing the Utah Senate earlier this year

The Utah Consumer Privacy Act unanimously passed the Utah Senate on February 25 and, with a few minor wording changes, passed unanimously in the Utah House on March 2. The final version is awaiting Governor Spencer Cox’s signature. If signed by the March 24 deadline, the law will take effect December 31, 2023, and make Utah the fourth state with a comprehensive consumer privacy law.

The law applies to controllers or processors that do business in the state or produce a product or service targeted to consumers who are Utah residents, have annual revenue of $25 million or more; and either a) control or process personal data of 100,000 or more consumers during a calendar year; or b) derive over 50 percent of the entity’s gross revenue from the sale of personal data and control or process the personal data of 25,000 or more consumers. Read More >>>