On March 24, 2022, the Utah Consumer Privacy Act (UCPA) was signed into law by Governor Spencer J. Cox, making Utah the fourth state, behind California, Virginia, and Colorado, to pass comprehensive consumer privacy legislation.
The UCPA’s Applicability
The UCPA applies to entities that:
conduct business in Utah or produce products and services that target Utah residents;
have an annual revenue of $25 million or more; and
either controls or processes the personal data of at least 100,000 Utah residents or derives 50% of its revenue from the sale of personal data and controls or processes the data of over 25,000 Utah residents.