"Utah Becomes Latest US State to Pass a Data Privacy Law"

Utah has passed a new privacy law called the Utah Consumer Privacy Act (UCPA).  UCPA will take effect in under two years, on December 31, 2023.  The provisions will apply to organizations with annual revenue of $25m or more that conduct business in Utah or produce products or services targeted at Utah residents and process large volumes of personal data.  Utah is the fourth US state to enact a consumer privacy law in recent years, following in the footsteps of California, Virginia, and Colorado.  The UCPA will provide Utah consumers with a range of new rights regarding the collection and use of their personal information.  These include the right to access, delete and obtain a copy of their personal data in a portable manner.  In addition, Utah consumers can choose to opt-out of the sale of their personal data and targeted advertising.  However, unlike California, Virginia, and Colorado laws, the UCPA does not give consumers the ability to correct inaccuracies in their personal data.  UCPA will also require controllers to implement reasonable and appropriate data security measures, provide certain content in their privacy notices, and include specific language in contracts with processors.  Unlike the other US state privacy laws, controllers will not be required to conduct data protection assessments before engaging in data processing activities that present a heightened risk of harm to consumers or to conduct cybersecurity audits or risk assessments.

Infosecurity reports: "Utah Becomes Latest US State to Pass a Data Privacy Law"