The Utah Consumer Privacy Act (UCPA) came into effect in 2023 and is considered one of the more business-friendly U.S. state-level data privacy laws. It gives Utah residents greater control over their personal data and requires businesses to be transparent about data collection and use. It also gives individuals rights, including access, deletion, and opt-out from sale or targeted advertising using their personal data.
To comply with the UCPA, businesses must provide clear, up-to-date privacy notices, disclose data collection and sharing practices, and enable Utah residents’ right to opt out of data sales and targeted advertising. They must also obtain parental consent before collecting or processing minors’ personal data.
The Utah Attorney General has full enforcement authority of UCPA, and the Division of Consumer Protection administers consumer complaints and has the authority to investigate alleged violations. Damages and fines can be up to $7,500 per violation. The UCPA has a 30-day cure period that does not sunset.
Achieve and maintain compliance with state, federal, and international privacy laws and frameworks, like California’s CCPA , the EU’s GDPR , and the TCF v2.2 .
Easily integrate Usercentrics CMP with your website, app, or other platforms. Supports popular CMS and other third-party services to help drive your Privacy-Led Marketing.
Be transparent with users about how you use data and give them control. It’s not just a legal requirement. It’s a competitive differentiator that grows engagement and long-term customer relationships.
Targeted features like A/B Testing and Contextual Consent enable you to improve user experience quickly. Use data insights to optimize consent rates and capture more high-quality data.
Automatically inform users about data processing and easily obtain UCPA-compliant consent for data processing on your website or app.
your questions answered
We’re happy to answer questions about data privacy, compliant marketing operations, and the UCPA. Usercentrics’ Consent Management Platform helps you build trust and avoid penalties. Learn more today.
Under the Utah Consumer Privacy Act (UCPA), consumers are granted four main rights:
The Utah Attorney General enforces the Utah privacy law, and the Division of Consumer Protection administers consumer complaints and has authority to investigate alleged violations. There is a 30-day cure period with no sunset date.
In cases where punitive action is required, like if the controller or processor fails to resolve or repeats a violation after providing a written statement to the contrary, the Attorney General can initiate enforcement, including damages and fines up to USD 7,500 per violation.
UCPA compliance software enables companies that process personal data to meet requirements under the Utah data privacy law. These include providing consumers with information about data processing and exercising their rights, and obtaining user consent where required.
A consent management platform (CMP) is a type of UCPA compliance software. A CMP enables companies to become compliant with the Utah privacy law on websites and apps. A CMP presents information to users about what tracking technologies are used to collect personal information. This enables users to make granular consent choices. A CMP also securely stores and documents consent information over time, and users can update their choices.