Skip to main content

On-demand webinar coming soon...

Utah Consumer Privacy Act Compliance

Simplify Utah Privacy Law (UCPA) compliance

Protect Utah consumer data and automate requirements for UCPA compliance with our OneTrust Privacy Automation.

Utah Consumer Privacy Act Compliance

Build trust through data privacy and governance

Streamline the fulfilment of consumer requests, automate the discovery and identification of categories of personal data, apply the necessary controls for UCPA compliance, and stay up to date with the latest regulatory changes. 

Use website geolocation data to ensure that Utah residents see the appropriate opt-out controls, such as do not sell, do not profile, and do not process for targeted advertising requests. Track verifiable consent and sync changes or correct inaccuracies across systems to avoid the unauthorized sale of data. 

User interface (UI) elements from the Consent and Preference Management module that show the number of consent transactions, the total receipts, and a circle graph breaking down the receipts by purpose.

Adhere to Utah’s notification requirements by centralizing your policies, notices, and disclosures. Seamlessly distribute them across web and mobile platforms from a single platform. Easily update your policies to reflect data subject rights under the UCPA and direct consumers to a data subject rights intake form.

Graphic showing number of policies, number of pages scanned, and number of behind logins

Conduct business in compliance with Utah residents’ rights to data access, deletion, portability, and non-discrimination. Respond to requests within the 45-day timeline, automating the fulfillment of privacy rights requests including intake, ID verification, data discovery, and secure response. 

A custom compliance checklist with actions assigned to team members

PRIVACY AUTOMATION
October 23, 2025

End-to-end automation for DSRs & privacy incidents

Learn how OneTrust automates DSRs and privacy incident management to reduce risk, accelerate responses, and scale privacy operations.


FAQs

We address some of the basics of the Utah Consumer Privacy Act to support your compliance program.

The Utah Consumer Privacy Act establishes consumers’ rights to the access, deletion, and portability of their data as well as the right to opt out of targeted advertising and the sale of their personal data. It also imposes obligations for data controller and processors, sets requirements for privacy notices, and grants the Utah Attorney General exclusive authority to enforce the law. With its passage, Utah became the fourth U.S. state with a comprehensive data privacy law.

The law applies to anyone who: 

 

  • Conducts business in Utah or produces products or services that are targeted to residents of Utah and have annual revenue of at least $25,000,000 
  • And either during a calendar year control or process personal data of at least 100,000 consumers, or control or process personal data of at least 25,000 consumers and derive over 50 percent of gross revenue from the sale of persona 
  • And do not fall into one of the exceptions in the law 

 

See more information on our DataGuidance Research resource

OneTrust Privacy Automation operationalizes the law’s requirements. We'll help you streamline your processes for addressing consumer requests, managing privacy policies, identifying your sensitive data, managing consent and so much more.

Ready to get started?

Request a free demo today to see how OneTrust can guide your compliance journey.