The Utah Senate Thursday accepted House amendments to the Consumer Privacy Act, and the Senate President signed the bill into law. On February 25, the Utah Senate voted 28-0 to enact the Consumer Privacy Act. The bill moved back to the Senate after the State House of Representatives considered it and was slightly amended before passing unanimously on Tuesday.

The legislation safeguards Utah consumers and allows them rights of access, correction, deletion, mobility and the option to opt-out of the sale of their personal data.

The bill regulates businesses that operate in Utah with annual revenue of $25,000,000 or more. The businesses must also either control or process the personal data of 100,000 or more consumers or derive over 50 percent of their gross revenue from the sale of personal data.

SB 227 resembles both the Virginia Consumer Data Protection Act and the Colorado Privacy Act. The bill imposes different requirements depending on whether a covered business is working as a controller who determines the purposes for processing data or a processor who processes data on behalf of a controller.

SB 227 will now be delivered to the Governor. The Governor has 20 days to either sign or veto the bill. In the case of veto, the legislature must override the veto for the bill to become law.