What is the Utah Consumer Privacy Act (UCPA)? | UpGuard

**Executive summary:** This article summarizes the Utah Consumer Privacy Act (UCPA), effective December 31, 2023, including applicability thresholds (annual revenue over $25M or processing data of >100,000 Utah consumers; or 50% revenue from selling personal data and >25,000 consumers), exemptions, consumer rights (confirmation, access, correction, deletion, portability, opt-out), controller and processor obligations (limited collection, security controls, consent for sensitive data, privacy notices, data protection assessments, contractual requirements for processors), and enforcement by the Utah Attorney General with fines up to $7,500 per violation and a 30-day cure period.