State Breach Law

Utah Data Breach Notification Law

Utah Code Ann. §§ 13-44-101 to 13-44-301 • Effective 2007-01-01

Utah wants fast notification. New privacy law adds consumer rights similar to California.

Notification deadline: Most expedient time possible

Enforcement: Utah Attorney General

Overview

Utah requires notification in the most expedient time possible. Consumer privacy law (UCPA) adds additional requirements.

Who Must Be Notified

  • Affected Utah residents
  • Utah Attorney General

Covered Data Types

Social Security number, Driver's license number, Financial account numbers

Notification Requirements

  • Written notice
  • Electronic notice permitted

Is your business exposed?

Exemptions

  • Encrypted data
  • Good faith acquisition

Penalties

Consumer Protection Act violations, UCPA penalties

If You Experience a Breach

  1. 1.

    Notify AG and residents expeditiously

Official Source

https://attorneygeneral.utah.gov/

Other State Breach Laws

New York, Texas, Florida

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required