Utah UCPA
Utah Consumer Privacy Act (Utah Code § 13-61-101 et seq., effective 31 Dec 2023).
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (10)
Consumer Rights
| Code | Title |
|---|---|
| Comparative Note | Absence of Universal Opt-Out Mechanism Requirement |
| §13-61-201 | Consumer Right to Confirm and Access Personal Data |
| §13-61-201(1)(b) | Right to Delete Personal Data Provided by Consumer |
| §13-61-201(1)(c) | Right to Data Portability |
| §13-61-201(1)(d) | Right to Opt Out of Sale of Personal Data |
| §13-61-201(1)(e) | Right to Opt Out of Targeted Advertising |
| §13-61-202 | Authentication of Consumer Requests |
| §13-61-203 | Response Timeline and Appeals Absence |
| §13-61-302(5) | Non-Discrimination for Exercising Rights |
Data Processing
| Code | Title |
|---|---|
| §13-61-301(2) | Deidentified Data Obligations |
Effective Date
| Code | Title |
|---|---|
| §13-61-304(1) | Effective Date and Ongoing Obligations |
Enforcement
| Code | Title |
|---|---|
| §13-61-402 | 30-Day Cure Period (Permanent, No Sunset) |
| §13-61-402(3) | Civil Penalties and Damages |
| §13-61-403 | Attorney General Enforcement and Notice |
Processor and Vendor Management
| Code | Title |
|---|---|
| §13-61-303 | Processor Duties and Controller-Processor Contracts |
Risk Assessment
| Code | Title |
|---|---|
| Comparative Note | Absence of Universal Opt-Out Mechanism Requirement |
Scope and Definitions
| Code | Title |
|---|---|
| §13-61-101 | Definitions |
| §13-61-102 | Scope and Applicability Thresholds |
| §13-61-304 | Statutory Exemptions for Specific Data and Activities |
Security
| Code | Title |
|---|---|
| §13-61-301(1) | Controller Duty of Data Security |
Sensitive Data
| Code | Title |
|---|---|
| §13-61-302(2) | Biometric and Precise Geolocation Express Consent |
| §13-61-302(4) | Sensitive Data Notice and Opt-Out (No Opt-In) |
Transparency
| Code | Title |
|---|---|
| §13-61-302(1) | Privacy Notice Requirements |
| §13-61-302(3) | Sale and Targeted Advertising Disclosure |
Frequently Asked Questions
What is Utah UCPA?
Utah UCPA is a compliance framework from United States with 10 domains and 24 controls. Utah Consumer Privacy Act (Utah Code § 13-61-101 et seq., effective 31 Dec 2023). It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
How many controls does Utah UCPA have?
Utah UCPA has 24 controls organised across 10 domains. The largest domains are Consumer Rights (9 controls), Enforcement (3 controls), Scope and Definitions (3 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
What frameworks does Utah UCPA map to?
Utah UCPA does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.
How do I get started with Utah UCPA compliance?
Start your Utah UCPA compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Utah UCPA requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 24 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 769 frameworks.
Get Started Free →Free forever — no credit card required