Utah Passes Comprehensive Privacy Law: How the UCPA Compares to Other State Privacy Laws

Following in the footsteps of California, Virginia and Colorado, Utah has become the fourth state to pass comprehensive consumer data privacy legislation. Utah Governor Spencer Cox signed Utah Consumer Privacy Act (“UCPA”) into law on March 24, 2022—the first major state law domino to fall in 2022 and the first comprehensive data privacy legislation since July 2021. This Legal Update discusses the UCPA’s scope; compares it with the other state privacy laws in the areas of exemptions, data subject rights and data controller obligations; and notes important dates related to the new law.