On 24 March 2022, the Utah Consumer Privacy Act (SB 227) was signed by the Governor of Utah. It will enter into effect on 31 December 2023. The Act will give individuals new rights over their data, including the right of access, deletion and rectification. In addition, the Act will enable individuals to opt-out from having their data collected for sale or targeted advertising purposes. Furthermore, the Act will require companies to include in their privacy notice the categories of personal data collected, the purpose of data processing and the categories of data shared with third parties. Finally, the Act will empower the Division of Consumer Protection to open investigations into complaints regarding data processing and the Attorney General to issue penalties for non-compliance. However, it does not provide users with a private right of action and allows companies to cure alleged violations within a 30 days before enforcement ensues.
Original source