Back to Frameworks

Utah Consumer Privacy Act

United States - Utah
v2023
9 domains
27 controls

Utah Consumer Privacy Act

Verified

Utah Consumer Privacy Act is a compliance framework from United States - Utah with 9 domains and 27 controls. The largest domains are Utah Code 13-61 Part 3: Controller and Processor Duties (10 controls), Utah Code 13-61 Part 2: Consumer Rights (7 controls), Utah Code 13-61 Part 4: Enforcement (3 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (9)

Enforcement

1 controls
Controls in the Enforcement domain of Utah Consumer Privacy Act1 controls
CodeTitle
UTAHUCPA-5AG Enforcement and Right to Cure

Notice

1 controls
Controls in the Notice domain of Utah Consumer Privacy Act1 controls
CodeTitle
UTAHUCPA-4Privacy Notice and Processing Agreements

Rights

1 controls
Controls in the Rights domain of Utah Consumer Privacy Act1 controls
CodeTitle
UTAHUCPA-2Consumer Rights

Scope

1 controls
Controls in the Scope domain of Utah Consumer Privacy Act1 controls
CodeTitle
UTAHUCPA-1Scope, Applicability, Definitions

Sensitive

1 controls
Controls in the Sensitive domain of Utah Consumer Privacy Act1 controls
CodeTitle
UTAHUCPA-3Sensitive Data and Children's Consent

Utah Code 13-61 Part 1: Scope and Definitions

2 controls
Controls in the Utah Code 13-61 Part 1: Scope and Definitions domain of Utah Consumer Privacy Act1 controls
CodeTitle
§13-61-102Scope and Applicability Thresholds

Utah Code 13-61 Part 2: Consumer Rights

7 controls
Controls in the Utah Code 13-61 Part 2: Consumer Rights domain of Utah Consumer Privacy Act7 controls
CodeTitle
§13-61-201Consumer Right to Confirm and Access Personal Data
§13-61-201(1)(b)Right to Delete Personal Data Provided by Consumer
§13-61-201(1)(c)Right to Data Portability
§13-61-201(1)(d)Right to Opt Out of Sale of Personal Data
§13-61-201(1)(e)Right to Opt Out of Targeted Advertising
§13-61-202Authentication of Consumer Requests
§13-61-203Response Timeline and Appeals Absence

Utah Code 13-61 Part 3: Controller and Processor Duties

10 controls
Controls in the Utah Code 13-61 Part 3: Controller and Processor Duties domain of Utah Consumer Privacy Act10 controls
CodeTitle
§13-61-301(1)Controller Duty of Data Security
§13-61-301(2)Deidentified Data Obligations
§13-61-302(1)Privacy Notice Requirements
§13-61-302(2)Biometric and Precise Geolocation Express Consent
§13-61-302(3)Sale and Targeted Advertising Disclosure
§13-61-302(4)Sensitive Data Notice and Opt-Out (No Opt-In)
§13-61-302(5)Non-Discrimination for Exercising Rights
§13-61-303Processor Duties and Controller-Processor Contracts
§13-61-304Statutory Exemptions for Specific Data and Activities
§13-61-304(1)Effective Date and Ongoing Obligations

Utah Code 13-61 Part 4: Enforcement

3 controls
Controls in the Utah Code 13-61 Part 4: Enforcement domain of Utah Consumer Privacy Act3 controls
CodeTitle
§13-61-40230-Day Cure Period (Permanent, No Sunset)
§13-61-402(3)Civil Penalties and Damages
§13-61-403Attorney General Enforcement and Notice

What is Utah Consumer Privacy Act and who does it apply to?

Utah Consumer Privacy Act is a compliance framework from United States - Utah with 9 domains and 27 controls. Utah Consumer Privacy Act It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does Utah Consumer Privacy Act actually require?

Utah Consumer Privacy Act has 27 controls organised across 9 domains. The largest domains are Utah Code 13-61 Part 3: Controller and Processor Duties (10 controls), Utah Code 13-61 Part 2: Consumer Rights (7 controls), Utah Code 13-61 Part 4: Enforcement (3 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of Utah Consumer Privacy Act do I already cover?

Utah Consumer Privacy Act does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.

How do I implement Utah Consumer Privacy Act?

Start your Utah Consumer Privacy Act compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Utah Consumer Privacy Act requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 27 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 686 frameworks.

Get Started Free →

Free forever — no credit card required