On 24 January 2023, the Cybersecurity Amendments Bill (SB 127) was introduced in the Utah Senate. The Bill would require companies who own or license computerised data that includes personal information to conduct an investigation when there is a breach of system security in order to determine the likelihood that personal information has been or will be misused for identity theft or fraud purposes. If an investigation reveals that the misuse of personal information for identity theft or fraud purposes has occurred or is reasonably likely to occur, the company would be required to provide notification to the affected persons and authorities.
Original source