Utah Consumer Privacy Act MV-502: Motor vehicle manufacturers: in-vehicle privacy controls for model year 2030 vehicles and deletion on protective orders

From 1 January 2027 motor vehicle manufacturers must, for model year 2030 and later vehicles (unless a model is technologically incapable), provide clearly labelled in-vehicle controls, usable by any driver and persistent, to view categories of data collected and third parties receiving it, opt out of sale and targeted advertising, and delete readily accessible data, without forcing use of an app or website; they must delete all personal data within 5 business days of a court order or protective-order request. Safety, operational and legally required data, temporary in-vehicle processing and minimal product-improvement data are exempt from the consent provisions.