More Regulatory Law news More news in Utah Find Regulatory Law lawyers in Utah
In a move to safeguard consumer privacy in the rapidly evolving digital landscape, Utah passed a new regulatory law on April 13, 2026. The law, known as the Consumer Data Protection Act (CDPA), sets strict guidelines for how businesses can collect, store, and use personal information obtained from Utah residents.Under the CDPA, businesses are required to obtain explicit consent from consumers before collecting any personal data. This includes information such as names, addresses, email addresses, phone numbers, and browsing history. The law also mandates that businesses must clearly disclose how the data will be used and provide consumers with the option to opt out of any data collection activities.Furthermore, the CDPA imposes strict security measures on businesses to protect consumer data from cyber threats and data breaches. Companies must implement encryption protocols, regular security audits, and data minimization practices to ensure that personal information is stored securely.Utah Governor, Sarah Williams, praised the new regulatory law, stating, "With the increasing reliance on digital platforms and the internet, it is crucial that we take proactive measures to protect the privacy of our residents. The Consumer Data Protection Act will provide Utah consumers with greater control over their personal information and ensure that businesses handle data responsibly."Additionally, the CDPA establishes a new regulatory body, the Utah Data Protection Authority, to oversee compliance with the law and investigate any violations. The authority has the power to impose fines and penalties on businesses that fail to adhere to the regulations outlined in the CDPA.Overall, the passage of the Consumer Data Protection Act marks a significant step towards enhancing consumer privacy rights in Utah. The law reflects the state's commitment to protecting the personal information of its residents and ensuring that businesses operate ethically in the digital age.