Records / Laws and rulings

Utah Consumer Privacy Act, definitions (deidentified data) (Utah Code 13-61-101(14))

Utah uses the three-part test inside the definition, and the current text adds that deidentified data includes synthetic data.

Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text

In the source's own words
“(14) (a) "Deidentified data" means data that: (i) cannot reasonably be linked to an identified individual or an identifiable individual; and ... (ii) are possessed by a controller who: (A) takes reasonable measures to ensure that a person cannot associate the data with an individual; ... (B) publicly commits to maintain and use the data only in deidentified form and not attempt to reidentify the data; and ... (C) contractually obligates any recipients of the data to comply with the requirements described in Subsections (14)(a)(ii)(A) and (B).”
Utah Consumer Privacy Act, definitions (deidentified data) (Utah Code 13-61-101(14)) | AIData.Broker