DPDPA is now in force in India. Run a free privacy scan on your site. Scan now

🇺🇸 Utah, USA

UCPA compliance with ConsentX

Utah Consumer Privacy Act

In short
Utah's privacy law is more business-friendly but still gives consumers the right to opt out of targeted advertising and the sale of personal data, with notice for sensitive data.
Region

Utah, USA

Status

In force since 2023

Group

United States

Who it applies to

Businesses with $25M+ revenue that process data of 100,000+ Utah consumers or derive over half of revenue from selling data of 25,000+.

Penalties

Up to $7,500 per violation, enforced by the Utah AG.

Key obligations

  • Offer opt-out of targeted ads and sale
  • Provide notice before processing sensitive data
  • Clear privacy notice
  • Honor consumer rights requests

How ConsentX helps

Targeted-ads and sale opt-out

Sensitive-data notice

Consumer rights intake

Get UCPA ready with ConsentX

Start free, or book a walkthrough with our team.

This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified counsel.

Frequently asked questions

Does Utah require opt-in for sensitive data?+

Utah requires clear notice and an opportunity to opt out for sensitive data, a lighter standard than Colorado or Virginia.