Questions & Answers

What is Deidentified Data in the Utah Consumer Privacy Act (“UCPA”)? It is data that: (a) cannot reasonably be linked to an identified individual or an identifiable individual; and (b) are possessed by a controller who: (i) takes reasonable measures to ensure that a person cannot associate the data...

What is Pseudonymous Data in the Utah Consumer Privacy Act (“UCPA”)? It is personal data that cannot be attributed to a specific individual without the use of additional information, if the additional information is: (a) kept separate from the consumer's personal data; and (b) subject to...

What is Sensitive Data in the Utah Consumer Privacy Act (“UCPA”)? It is personal data that reveals: (a) an individual's racial or ethnic origin; (b) an individual's religious beliefs; (c) an individual's sexual orientation; (d) an individual's citizenship or immigration status; or (e) information...

What is the Utah Consumer Privacy Act (“UCPA”)? Utah passed the Consumer Privacy Act (“UCPA”), which took effect on December 31, 2023. With the passing of this new law, Utah becomes the fourth state to enact a consumer data privacy law. The UCPA requires a business to meet both a financial...