United States of America: Signed Consumer Privacy Act
Description
Signed Consumer Privacy Act
On 24 March 2022, the Utah Consumer Privacy Act (SB 227) was signed by the Governor of Utah. Besides new rights for data subjects, the Act requires companies to introduce system security standards to ensure cybersecurity. The Act empowers the Division of Consumer Protection to open investigations into complaints regarding data processing and the Attorney General to issue penalties for noncompliance.
Original sourceScope
Policy Area
Other operating conditions
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
legislature
Government Body
parliament
Complete timeline of this policy change
Hide details
2022-02-17
under deliberation
2022-03-03
adopted
2022-03-24
adopted
Key regulatory dimensions
Regulated subjects
The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type
Private organisation
Economic activity
cross-cutting
Category
All
Policy change by business practice
The detailed activities within the scope of this policy or regulatory change.
personal data (all forms): data collection
Regulatory tool
Preventive security requirement
User notification requirement
Sanctions
Fine
Remuneration requirement
Regulated subjects
1
personal data (all forms): data processing
Regulatory tool
Preventive security requirement
User notification requirement
Sanctions
Fine
Remuneration requirement
Regulated subjects
1