Utah Consumer Privacy Act, controller responsibilities (sensitive data notice and opt-out) (Utah Code 13-61-302(3))
Utah does not require opt-in consent for sensitive data: clear notice and a chance to opt out first is enough. The Act has applied since 31 December 2023.
Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text
In the source's own words
“Effective 12/31/2023 ... (3) Except as otherwise provided in this chapter, a controller may not process sensitive data collected from a consumer without: (a) first presenting the consumer with clear notice and an opportunity to opt out of the processing; or”
Where it was read
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide