UCPA
Utah Consumer Privacy Act
Utah, USA
In force since 2023
United States
Who must comply
Businesses with $25M+ revenue that process data of 100,000+ Utah consumers or derive over half of revenue from selling data of 25,000+.
Penalties
Up to $7,500 per violation, enforced by the Utah AG.
Key obligations
- Offer opt-out of targeted ads and sale
- Provide notice before processing sensitive data
- Clear privacy notice
- Honor consumer rights requests
How ConsentX helps
Targeted-ads and sale opt-out
Sensitive-data notice
Consumer rights intake
Get UCPA ready with ConsentX
This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified local counsel.
How to comply with UCPA using ConsentX
- 1
Scan your website
Run a free scan to find every cookie and tracker on your site, so you know exactly what needs consent under UCPA.
- 2
Show a geo-aware consent banner
Add the ConsentX banner. It detects each visitor region and shows the consent experience that UCPA requires, automatically.
- 3
Block trackers until consent
Keep non-essential cookies and trackers blocked until the visitor agrees, so nothing fires before consent.
- 4
Record tamper-evident proof
Every choice is stored as a tamper-evident consent receipt you can produce in a UCPA audit.
- 5
Handle data requests on time
Use the built-in DSAR workflow with SLA timers to answer access, deletion and opt-out requests within the legal deadline.
Frequently asked questions
Does Utah require opt-in for sensitive data?+
Utah requires clear notice and an opportunity to opt out for sensitive data, a lighter standard than Colorado or Virginia.