LEHI DATA PRIVACY COMPLIANCE LAWYER

Utah's Data Privacy Regulations and Your Business

Under state and federal law, businesses that collect, control, or process consumers’ private information must adhere to certain data privacy regulations. Compliance with data privacy laws is critical for avoiding litigation and other legal problems that could ultimately harm your business. 

At Gibson Law Firm, we assist business law clients in ensuring complete data privacy compliance. Whether you own a small, family-run business or operate a large, well-known corporation, our firm can help you meet all applicable requirements. Our Lehi data privacy compliance attorney is well-versed in Utah’s data privacy laws and brings more than 12 years of legal experience to his practice. 

For more information, please call (877) 540-4416 or contact us online to schedule a consultation.

What Is the Utah Consumer Privacy Act?

The Utah Consumer Privacy Act (UCPA) governs consumer privacy and data protection rights on behalf of Utah residents. Signed into law by Governor Spencer Cox on March 24, 2022, the UCPA will go into effect on December 31, 2023. At this time, all businesses subject to the rules and regulations of the UCPA will need to ensure compliance with the law. 

The UCPA applies to controllers and processors, that is, groups that control and/or process consumers’ private data. The law also defines two types of private data that are subject to various protections.

These two types of private data include: 

• Personal Data: Personal data includes information that is or could be used to identify an individual, such as a name, birth date, or Social Security number.
• Sensitive Data: Sensitive data is personal data that is or could be used to reveal certain information about an individual, such as their race, sexual orientation, medical history, etc.

The law grants certain rights to consumers and holds controllers and processors accountable for granting/maintaining those rights. 

The consumer rights outlined by the UCPA include: 

• The right to know whether their personal data is being processed or controlled
• The right to access their personal data 
• The right to request a copy of their personal data in a legible and portable format
• The right to opt out when personal data will or may be sold
• The right to opt out when personal data processing is used for targeted advertising
• The limited right to request that a controller or processor delete or remove personal data
• The right to be free from discrimination due to asserting their rights under the UCPA

The Utah Division of Consumer Protection (UDVP) and the Utah Attorney General will be authorized to enforce the UCPA as it applies to controllers and processors.