Your Utah consumer data rights
In effect
The Utah Consumer Privacy Act gives Utah residents some rights over the personal data that large covered businesses collect about them. It has been in effect since December 31, 2023.
- Who or what it protects
- Utah residents, in their dealings with businesses in Utah or targeting its residents that have annual revenue of $25 million or more and either process the personal data of at least 100,000 consumers a year, or of at least 25,000 while earning more than half of their gross revenue from selling personal data.
- What you can do
- You can confirm whether a business processes your personal data and see it. You can ask the business to delete the personal data you gave it, and get a copy of the personal data you gave it. You can opt out of targeted advertising and the sale of your data. Send the business a request naming the right you want to use; it must respond within 45 days. You can file a complaint with the Utah Division of Consumer Protection.
- Limits and eligibility
- Utah's law covers only large businesses, and the Division does not investigate a complaint about a business below its thresholds. Deletion covers the personal data you gave the business. The Division contacts you only if it opens a case, so a complaint does not guarantee action. This page lists the rights the Division of Consumer Protection describes and may not list every right the law gives you: the law's current text, published by the Utah Legislature, is the authority.
- Who oversees it
- Utah Division of Consumer Protection
- The law
- Utah Consumer Privacy Act
More official places to go
Checked against the official sources on October 7, 2026. Links last checked November 1, 2026.