Utah data privacy and data broker removal

Utah's privacy law gives you the right to access, delete, and control your personal data. Here's how those rights work and how to get your information off data brokers.

Your rights in Utah

Utah residents are protected by the Utah Consumer Privacy Act (UCPA).

• Right to access and know. Request a copy of the personal information a company holds about you.
• Right to delete. Ask a company to delete your personal information.
• Right to data portability. Get your data in a portable format you can take to another service.
• Right to opt out of sale. Tell a company to stop selling your personal information.
• Right to opt out of targeted advertising. Stop companies from targeting ads at you based on your personal data.

Does this cover the company that has my data?

Utah's law covers larger businesses, not every company that holds your data. A business is covered only if it makes at least $25 million a year and also meets one of these:

• Controls or processes the personal data of 100,000 or more consumers in a year, or
• Controls or processes the data of 25,000 or more consumers and makes over half its revenue from selling personal data.

How to remove yourself from data brokers in Utah

Utah law gives you the right to request deletion. Exercising it across every site that holds your data takes real effort. Here are the most effective steps, in order.

1. Enable Global Privacy Control

Global Privacy Control is a free browser setting that automatically tells every website you visit not to sell or share your data. It takes two minutes to turn on and works silently in the background. Utah does not mandate it yet, but most major companies honor it because they have to comply with California's law anyway.

2. Submit direct opt-out requests

For sites that don't act on Global Privacy Control, submit requests directly. Look for the "Do Not Sell My Personal Information" link in each company's website footer. You can also send formal access, deletion, or correction requests through each company's privacy policy page.

Under Utah's law, covered companies must respond within the required deadline. If they don't, you have grounds to file a complaint with the Utah Division of Consumer Protection, which investigates and can refer cases to the Utah Attorney General.

3. Automate ongoing removal

Even after you finish every step above, brokers pull your information back from public records, data-sharing networks, and commercial databases. Within a few months, the listings return. Staying off these sites isn't a one-time task; it's ongoing work that's hard to keep up by hand.

Utah's data broker law: what it means for you

Utah has no dedicated data-broker registry. Most national brokers honor opt-out requests from residents of any state, but without a Utah law requiring it, you have little recourse if a broker ignores you. Delist handles these requests across sites and states in one place.

Other privacy protections in Utah

Beyond the comprehensive privacy law, Utah has other protections that may apply to you:

• Minors' online safety. The Utah Minor Protection in Social Media Act adds protections for younger users.
• Address confidentiality. Utah's Safe at Home program shields the addresses of survivors of domestic violence and stalking.
• Biometric data. Utah has no standalone biometric law, but biometric data counts as sensitive data under the UCPA and gets extra protection.

How to file a privacy complaint in Utah

File with the Utah Division of Consumer Protection or the Utah Attorney General.

Most state agencies enforce privacy laws in the aggregate. They investigate patterns of violations rather than resolving individual disputes. Filing a complaint still matters: it creates a record that helps trigger enforcement.

Frequently asked questions

Sources

• le.utah.gov
• consumerprotection.utah.gov
• huschblackwell.com