United States of America: Implemented Consumer Privacy Act
Description
Implemented Consumer Privacy Act
On 31 December 2023, the Utah Consumer Privacy Act (SB 227) is implemented. The Act gives individuals new rights over their data, including the right of access, deletion and rectification and enables individuals to opt-out from having their data col…
Scope
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
legislature
Government Body
parliament
Complete timeline of this policy change
Hide details
2022-02-17
under deliberation
2022-03-03
adopted
2022-03-24
adopted
Key regulatory dimensions
Regulated subjects
The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type
Private organisation
Economic activity
cross-cutting
Category
All
Policy change by business practice
The detailed activities within the scope of this policy or regulatory change.
personal data (all forms): data collection
Regulatory tool
User right to access personal data
User right to deletion of personal data
User right to portability of personal data
User notification requirement
Complaint mechanism requirement
Corporate right to cure
Prohibition of discrimination on the basis of exercised user rights
Sanctions
Restitution of damages
Fine
Regulated subjects
1
personal data (all forms): data processing
Regulatory tool
User right to access personal data
User right to deletion of personal data
User notification requirement
Complaint mechanism requirement
User right to information about third-parties, with which data has been shared
Corporate right to cure
Prohibition of discrimination on the basis of exercised user rights
Sanctions
Restitution of damages
Fine
Regulated subjects
1
advertisement: contextual targeting: marketing (any form)
Regulatory tool
User consent: Permit user opt-out
Complaint mechanism requirement
User right to information about third-parties, with which data has been shared
Corporate right to cure
Prohibition of discrimination on the basis of exercised user rights
Sanctions
Restitution of damages
Fine
Regulated subjects
1