On 17 February 2022, the Consumer Privacy Act (SB 227) was introduced in the Utah Senate. Besides new rights for data subjects, the Act would require companies to introduce system security standards to ensure cybersecurity. The Act would empower the Division of Consumer Protection to open investigations into complaints regarding data processing and the Attorney General to issue penalties for noncompliance.
Original source