Utah Data Privacy & Data Broker Removal

Utah has a comprehensive privacy law that gives you the right to access, delete, and control your personal data. Here is how those rights work in practice and how to remove yourself from data brokers.

Your rights in Utah

Utah residents are protected by the Utah Consumer Privacy Act (UCPA) (Utah Code Ann).

• Right to Access & Know — Request a copy of the personal information a company holds about you.
• Right to Delete — Ask a company to delete your personal information.
• Right to Data Portability — Get your data in a portable format you can take to another service.
• Right to Opt Out of Sale — Tell a company to stop selling your personal information.
• Right to Opt Out of Targeted Advertising — Stop companies from targeting you with ads based on your personal data.

Does this cover the company that has my data?

Most large companies that handle personal data are covered.

A company is covered if it meets any of these thresholds:

• Annual revenue of at least $25M

How to remove yourself from data brokers in Utah

Your state law gives you the right to request deletion — but exercising it across hundreds of brokers takes real effort. Here are the most effective steps, in order.

1. Enable Global Privacy Control

Global Privacy Control is a free browser setting that automatically tells every website you visit not to sell or share your data. It takes two minutes to enable and works silently in the background on every site. Utah does not mandate it yet, but most major companies honor it voluntarily because they must comply with California's law anyway.

2. Submit direct opt-out requests

For brokers not covered by the registry or GPC, you can submit requests directly. Look for the "Do Not Sell My Personal Information" link in each company's website footer — most major brokers have one. You can also submit formal access, deletion, or correction requests through each company's privacy policy page.

Under Utah's law, covered companies must respond within the statutory deadline. If they don't, you have grounds to file a complaint with the Utah Attorney General's Division of Consumer Protection.

3. Automate ongoing removal

Here is the part nobody tells you: even after you complete every step above, brokers re-ingest your information from public records, data-sharing networks, and commercial databases. Within a few months, your profiles reappear. Staying removed from hundreds of brokers is not a one-time task — it is an ongoing commitment that most people cannot maintain manually.

Utah's data broker law: what it means for you

Utah does not have a dedicated data-broker registry. Most national data brokers are registered in California and honor opt-out requests from residents of any state — but without a Utah-specific law requiring it, you have no legal recourse if a broker ignores your request. Services like Delist handle this across states and brokers in one place.

Other privacy protections in Utah

Beyond the comprehensive privacy law, Utah has additional protections that may apply to you:

• Utah has separately enacted strong minors' social-media and online-safety laws (Utah Minor Protection in Social Media Act).
• Address Confidentiality Program (Safe at Home) administered by the UT Attorney General for DV/stalking survivors.
• No Daniel's-Law analogue identified.
• Biometric data — No standalone biometric statute with a private right of action (biometric data is 'sensitive data' under the UCPA).

How to file a privacy complaint in Utah

Utah Division of Consumer Protection — https://consumerprotection.utah.gov/ ; Utah Attorney General — https://attorneygeneral.utah.gov/

Most state agencies enforce privacy laws in the aggregate — they investigate patterns of violations rather than resolving individual disputes. Filing a complaint still matters: it creates a record that helps trigger enforcement actions.

Frequently asked questions

Sources

• le.utah.gov
• consumerprotection.utah.gov
• huschblackwell.com