Utah Consumer Privacy Act (UCPA)
Complete compliance guide for companies with <200 employees. Everything you need to know about UCPA requirements, deadlines, and penalties.
45 calendar days
+ 45 days extension
$7,500/violation
Up to $7,500 per violation. The AG must provide a 30-day cure period before enforcement — this cure period has no sunset date, making UCPA the most business-friendly US state privacy law. The Division of Consumer Protection handles initial complaints.
100,000 consumers
or $25,000,000 revenue
$3,000 – $12,000
3-8 weeks
Mid-Market Compliance Guide
Utah's UCPA is the most business-friendly US state privacy law. It requires BOTH $25 million+ annual revenue AND processing data of 100,000+ consumers (or 25,000+ consumers with 50% revenue from data sales). Notably, UCPA does NOT include a right to correct, making it narrower than most other state laws. The permanent 30-day cure period means the AG must always give businesses a chance to fix issues before penalties apply.
Key Requirements
- Provide a privacy notice disclosing data categories and purposes
- Obtain consent before processing sensitive data
- Provide a method for consumers to opt out of sale and targeted advertising
- Conduct data protection assessments when required
- Implement reasonable data security practices
Consumer Rights
Business Obligations
- 1.Provide clear privacy notice at collection
- 2.Respond to consumer requests within 45 days
- 3.Implement reasonable security measures
- 4.Establish data processing agreements with processors
Exemptions
- •HIPAA-covered entities and data
- •GLBA-covered financial institutions
- •Nonprofits
- •Higher education institutions
- •Government entities
Related Privacy Laws
Recommended Compliance Tools
No vendors have been reviewed for UCPA coverage yet.
Browse all compliance toolsGet a mid-market compliance checklist for UCPA
We'll send you a practical, step-by-step checklist tailored for companies with <200 employees. No spam, unsubscribe anytime.
See how DPAs enforce UCPA in practice
Real fines, real violations, real lessons. Browse our enforcement database to understand what gets penalized under UCPA.
Disclaimer: This is general information, not legal advice. Consult a qualified attorney for your specific situation. Laws and regulations may change. Last reviewed: 3/3/2026.