Utah data privacy and data broker removal
Utah's privacy law gives you the right to access, delete, and control your personal data. Here's how those rights work and how to get your information off data brokers.
At a glance
- Comprehensive privacy law? Yes, the Utah Consumer Privacy Act (UCPA)
- In effect since December 31, 2023
- Your core rights Access, delete, data portability, opt out of sale and targeted advertising
- Honors Global Privacy Control? No
- Data-broker registry? No
- Can you sue? (private right of action) No
- Enforced by Utah Division of Consumer Protection (refers to the Attorney General)
What Delist can do for you in Utah
Utah has a comprehensive privacy law, the Utah Consumer Privacy Act (UCPA), but it does not recognize authorized agents. We submit your requests on your behalf and say so in each one. A broker may decline and ask you to submit and verify directly; when that happens we tell you and show you exactly what to send.
Basis: Utah Code § 13-61-101 et seq. (UCPA). Reviewed September 1, 2026. How the three groups work: our authorized-agent framework.
Your rights in Utah
Utah residents are protected by the Utah Consumer Privacy Act (UCPA).
- Right to access and know. Request a copy of the personal information a company holds about you.
- Right to delete. Ask a company to delete your personal information.
- Right to data portability. Get your data in a portable format you can take to another service.
- Right to opt out of sale. Tell a company to stop selling your personal information.
- Right to opt out of targeted advertising. Stop companies from targeting ads at you based on your personal data.
Does this cover the company that has my data?
Utah's law covers larger businesses, not every company that holds your data. A business is covered only if it makes at least $25 million a year and also meets one of these:
- Controls or processes the personal data of 100,000 or more consumers in a year, or
- Controls or processes the data of 25,000 or more consumers and makes over half its revenue from selling personal data.
How to remove yourself from data brokers in Utah
Utah law gives you the right to request deletion. Exercising it across every site that holds your data takes real effort. Here are the most effective steps, in order.
1. Enable Global Privacy Control
Global Privacy Control is a free browser setting that automatically tells every website you visit not to sell or share your data. It takes two minutes to turn on and works silently in the background. Utah does not mandate it yet, but most major companies honor it because they have to comply with California's law anyway.
2. Submit direct opt-out requests
For sites that don't act on Global Privacy Control, submit requests directly. Look for the "Do Not Sell My Personal Information" link in each company's website footer. You can also send formal access, deletion, or correction requests through each company's privacy policy page.
Under Utah's law, covered companies must respond within the required deadline. If they don't, you have grounds to file a complaint with the Utah Division of Consumer Protection, which investigates and can refer cases to the Utah Attorney General.
3. Automate ongoing removal
Even after you finish every step above, brokers pull your information back from public records, data-sharing networks, and commercial databases. after new source data is ingested, the listings return. Staying off these sites isn't a one-time task; it's ongoing work that's hard to keep up by hand.
Delist finds your exposed listings, files removal requests, and runs a full scan every month for data that comes back. Run a free scan to see where you're exposed, including what AI assistants say about you. It takes under a minute.
Run a free scan →Utah's data broker law: what it means for you
Utah has no dedicated data-broker registry. Most national brokers honor opt-out requests from residents of any state, but without a Utah law requiring it, you have little recourse if a broker ignores you. Delist handles these requests across sites and states in one place.
Other privacy protections in Utah
Beyond the comprehensive privacy law, Utah has other protections that may apply to you:
- Minors' online safety. The Utah Minor Protection in Social Media Act adds protections for younger users.
- Address confidentiality. Utah's Safe at Home program shields the addresses of survivors of domestic violence and stalking.
- Biometric data. Utah has no standalone biometric law, but biometric data counts as sensitive data under the UCPA and gets extra protection.
How to file a privacy complaint in Utah
File with the Utah Division of Consumer Protection or the Utah Attorney General.
Most state agencies enforce privacy laws in the aggregate. They investigate patterns of violations rather than resolving individual disputes. Filing a complaint still matters: it creates a record that helps trigger enforcement.
Frequently asked questions
Does Utah have a data privacy law?
Yes. Utah residents are protected by the Utah Consumer Privacy Act (UCPA), which gives you rights to access, delete, and control your personal data.
Can I sue a company for violating my privacy in Utah?
Generally no. Privacy enforcement in Utah is handled by the Utah Division of Consumer Protection, which can refer cases to the Attorney General. You cannot sue for most violations.
How do I opt out of data brokers in Utah?
Enable Global Privacy Control, submit direct opt-out requests to each broker, and consider a removal service to automate the process. Utah has no broker registry.
Does Utah require websites to honor Global Privacy Control?
Not yet mandated statewide, but many companies honor GPC voluntarily. Enable it in your browser settings. It costs nothing and signals your opt-out preference automatically.
This page is privacy-rights information, not legal advice. Privacy law changes frequently; verify current rules with your state privacy agency or a licensed attorney before acting. Last verified 2026-06-22. We re-check state privacy laws quarterly.