Fast.  Secure.  Free.  Forever.
Utah State Privacy Law
Effective December 31, 2023

Utah Consumer Privacy Act
(UCPA)

The Utah Consumer Privacy Act (UCPA) gives Utah residents the right to access, delete, and opt out of the sale of their personal data.

UCPA
Law Abbreviation
$7,500
Max Fine Per Violation
45
Days to Respond
100,000
Coverage Threshold
Your Rights Under UCPA

What the law gives you

The Utah Consumer Privacy Act (UCPA) grants residents the following legally enforceable rights over their personal data:

Access
Confirm processing and receive a copy of your personal data.
Delete
Delete personal data that you provided to the controller.
Portability
Receive your data in a portable, machine-readable format.
Opt Out
Opt out of the sale of personal data or targeted advertising.
How to Exercise Your Rights

Step by step

01
Submit a rights request to the business directly. Check their privacy policy for the mechanism.
02
The company has 45 days to respond, extendable by 45 days with written notice.
03
If unsatisfied, file a complaint with the Utah Division of Consumer Protection.
04
The AG’s office may bring enforcement action after 30-day notice to cure.
ClickOff makes this automatic. Rather than submitting individual requests to hundreds of data brokers, ClickOff acts as your authorized agent under the UCPA and all applicable state laws — submitting deletion requests to 200+ brokers simultaneously. Free forever.
Delete your data under UCPA.
Free forever. Legal receipt generated instantly. 45-day compliance clock starts now.
Delete My Data From Every Broker →
Related Laws

Other privacy laws that protect you

CCPA — California → SB 362 — Delete Act → ADPA — Federal → All Your Rights →
UCPA questions
Utah privacy law,
explained.
Does the UCPA require opt-in consent?
No. Unlike some other state laws, the UCPA does not require opt-in consent for sensitive data — only the right to opt out. This makes it one of the more business-friendly state privacy laws.
What businesses are covered?
Businesses that earn $25M+ in revenue AND process data from 100,000+ Utah consumers annually, or process data from 25,000+ consumers and derive 50%+ of revenue from data sales.
Is there a private right of action in Utah?
No. Enforcement is exclusively by the Utah AG, with a mandatory 30-day notice and cure period before fines can be assessed.
How does ClickOff help me use my UCPA rights?
ClickOff acts as your authorized agent under the UCPA and all applicable state laws. Instead of sending individual deletion requests to hundreds of data brokers one by one, ClickOff submits on your behalf to 200+ brokers simultaneously — with a legal receipt generated instantly. Free forever.