What is the UCPA?
The Utah Consumer Privacy Act (UCPA) (opens in a new tab) is a comprehensive consumer privacy law that protects the data privacy rights of all Utah residents. UCPA will go into effect at the end of the year on December 31, 2023. If your business is subject to Utah’s privacy law, you can the steps in this guide to ensure UCPA compliance.
Who is Subject to UCPA?
UCPA applies to businesses or "controllers" that operate in Utah or target their products or services to Utah residents. These businesses must also earn a revenue of at least $25,000,000 a year, and:
- Control or process the personal data of 100,000 or more customers in a year, or
- Control or process the personal data of 25,000 or more customers in a year and generate more than 50% of gross revenue from the sale of personal data.
Utah's high revenue threshold means that fewer businesses will be subject to the law. Before making changes to your business operations, check and see if your business fulfills the criteria above. If so, your business can take the steps listed in this guide to ensure compliance with UCPA.