Sign in
Start free

United States

UCPA

Utah Consumer Privacy Act

The UCPA is Utah’s consumer privacy law, narrower in scope than California’s or Virginia’s. It focuses on transparency and opt-outs of targeted advertising and the sale of personal data, and gives rights to access, delete, copy and, since July 2026, correct personal data. It is enforced by the Utah Attorney General.

Start free
Run a free scan

At a glance

Opt-out

Region
Utah, USA
Status
In force since December 2023
Penalties
Civil penalties of up to USD 7,500 per violation, plus actual damages to consumers. The Attorney General must first give 30 days’ written notice and a chance to cure, and this right to cure has no end date.
Who it affects
Controllers and processors with annual revenue of USD 25 million or more that do business in Utah or target its residents, and control or process the personal data of 100,000 or more Utah consumers a year, or of 25,000 or more while deriving more than 50% of gross revenue from selling personal data.

What the UCPA requires

  • Provide a clear privacy notice covering the categories of data and purposes.
  • Offer an opt-out of targeted advertising and the sale of personal data.
  • Give clear notice and a chance to opt out before processing sensitive data.
  • Respond to requests to access, correct, delete or get a copy of personal data within 45 days.
  • Use reasonable data security practices appropriate to the data you hold.
  • Sign processing agreements with vendors that handle personal data.

Your site’s footer

An example

  • Privacy policy
  • Terms
  • Do Not Sell or Share My Personal Information

What the banner does here

The same opt-out mode as California: no blocking wall, a “Do Not Sell or Share My Personal Information” link on every page, and a preference centre to opt out.

How GrantCookie covers it

  • Scheduled scans. The scanner finds the cookies and trackers your site sets, sorts them into categories and re-checks on every scheduled scan, so the banner asks about what is really there.
  • Provable records. Every choice is timestamped and stored with the banner version the visitor saw. Paid plans include consent log export.
  • Opting out later. The opt-out link and preference centre are always available, so visitors can opt out or change an earlier choice at any time.

See every feature

The consent log: each row has a timestamp in UTC, a consent ID and the visitor’s choice

This page is general guidance. It is not legal advice. Check your specific obligations with a qualified adviser.

Related regulations

All regulations

  • CCPA

    Opt-out

    California Consumer Privacy Act

    California, USA In force since January 2020

  • CPA

    Opt-out

    Colorado Privacy Act

    Colorado, USA In force since July 2023

  • CPRA

    Opt-out

    California Privacy Rights Act

    California, USA In force since January 2023

Start free. No card, no sales call.

Scan your site, publish the banner, and move up a tier when you outgrow the free plan. Every plan is on the pricing page.

14-day trial on paid plans · Cancel any time · No card required to start

Start free
See every price