On 31 December 2023, the Utah Consumer Privacy Act (SB 227) is implemented. The Act gives individuals new rights over their data, including the right of access, deletion and rectification and enables individuals to opt-out from having their data collected for sale or targeted advertising purposes. Furthermore, the Act requires companies to include in their privacy notice the categories of personal data collected, the purpose of data processing and the categories of data shared with third parties. Finally, the Act empowers the Division of Consumer Protection to open investigations into complaints regarding data processing and the Attorney General to issue penalties for non-compliance. However, it does not provide users with a private right of action and allows companies to cure alleged violations within a 30 days before enforcement ensues.
Original source