---
title: Should Utah's Privacy Law Be on Your Radar?
description: The Utah Consumer Privacy Act is one of five new privacy laws taking effect in 2023. Does your business need to be compliant?
image: https://safe.truevault.com/hubfs/images/utah-flag.jpg
---
- [CCPA](https://safe.truevault.com/learn/ccpa/what-is-the-ccpa)
- [GDPR Compliance](https://safe.truevault.com/gdpr-guide)
- [HIPAA](https://safe.truevault.com/learn/hipaa)
- [HIPAA Compliance](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html)
- [Personally Identifiable Information](https://safe.truevault.com/blog/what-is-pii)
- [PHI](https://safe.truevault.com/protected-health-information)
- [Resources](https://safe.truevault.com/learn/)
- Login
[TrueVault Safe Log in to TrueVault Safe](https://console.truevault.com) [TrueVault Polaris Log in to TrueVault Polaris](https://polaris.truevault.com)
- [Resources](https://safe.truevault.com/learn/)
- Login
- Login
- [TrueVault Safe Log in to TrueVault Safe](https://console.truevault.com)
- [TrueVault Polaris Log in to TrueVault Polaris](https://polaris.truevault.com)
[Blog](https://safe.truevault.com/blog)
- [Home](https://www.truevault.com/index.html)
- [Blog](https://safe.truevault.com/blog)
# Should Utah's Privacy Law Be on Your Radar?
By Phillip Walters/ Published on November 17, 2022
When it comes to privacy compliance, businesses will have a lot on their plate in 2023. Major changes to the [California Consumer Privacy Act](https://safe.truevault.com/learn/ccpa/what-is-the-ccpa) (CCPA) are going into effect (including the expiration of [employee data exemption](https://safe.truevault.com/blog/ca-legislature-fails-to-extend-ccpa-exemptions-for-employee-b2b-data)), as well as four new state privacy laws. Among these is the Utah Consumer Privacy Act (UCPA).
The UCPA is somewhat more pro-business than the other state laws, including the [Virginia Consumer Data Privacy Act](https://safe.truevault.com/resources/virginia/what-is-the-virginia-consumer-data-protection-act) on which it’s modeled, but it still imposes significant privacy obligations. The first step toward compliance is determining whether Utah’s privacy law applies to your business.
# Which Businesses Must Comply with the UCPA?
Compared to the other data privacy laws, the UCPA is narrower in scope. A for-profit business must comply with the Utah Consumer Privacy Act if it meets the following three criteria:
1. It does business in the state of Utah,
2. It has at least $25 million in annual revenue, and
3. Either of the following applies:
## Doing Business in the State of Utah
This is the most basic requirement. Having a physical presence in the state counts as doing business there, but so does selling goods or services online to Utah residents.
## At Least $25 Million in Annual Revenue
This requirement is unique to the UCPA. It’s worth noting that the $25 million figure refers to *all* gross revenue, not just revenue from Utah.
## Processing Requirements
For businesses that operate online, the 100K-consumer threshold is easier to meet than they may realize. Websites are processing personal data (IP address, cookies, etc.) from each of their visitors. Getting just 8,400 unique visitors from Utah per month will put them over 100,000 for the year.
# Exemptions
The UCPA lists several exemptions for certain types of organizations and personal data. These include:
- Governmental entities
- Nonprofit corporations
- Institutes of higher education
- Native American tribes
- Covered entities and business associates, as defined by HIPAA
- Financial institutions regulated by the Gramm-Leach-Bliley Act
# Manage Multi-State Privacy Compliance in One Place
Navigating the complexities of multiple privacy laws at once can be difficult for any business, but it’s even harder for businesses that don’t have in-house privacy experts or legal departments. TrueVault US simplifies multi-state privacy compliance, allowing businesses of any size to handle it on their own.
Designed by attorneys, TrueVault US is an all-in-one privacy software that helps you get your business fully compliant with laws like the UCPA, CCPA, and more, even if you’re starting from scratch. From onboarding vendors to processing privacy requests, TrueVault provides guidance at every step.
[Contact our team](https://www.truevault.com/contact-us) to learn more and view a demo.
### Latest Posts
## [Should Utah's Privacy Law Be on Your Radar?](https://safe.truevault.com/blog/utah-privacy-law-does-it-apply)
Phillip Walters / November 17, 2022
## [Connecticut’s Privacy Law: Does It Apply to Your Business?](https://safe.truevault.com/blog/connecticut-privacy-law-does-it-apply)
Phillip Walters / November 10, 2022
## [Global Privacy Control: A New Requirement for Compliance](https://safe.truevault.com/blog/global-privacy-control)
Phillip Walters / November 7, 2022
## [A Cookie Banner Isn't Enough for CCPA Compliance](https://safe.truevault.com/blog/a-cookie-banner-isnt-enough)
Phillip Walters / October 27, 2022
## [Why CCPA Compliance Matters to HR](https://safe.truevault.com/blog/why-ccpa-matters-to-hr)
Phillip Walters / October 21, 2022
### Mailing List
### Company
- [Blog](https://safe.truevault.com/blog)
- [Contact Us](https://safe.truevault.com/contact-us-2019)
- [Careers](https://truevault.workable.com)
- [HIPAA Compliance Checklist](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html)
- [PDF: Developers Guide to HIPAA compliance](https://my.leadpages.net/leadbox/14472b173f72a2%3A131fd12f8b46dc/5760820306771968/)
### Developers
- [Patterns](https://safe.truevault.com/patterns)
- [Documentation](https://docs.truevault.com/)
- [Quick Start Guide](https://safe.truevault.com/quick-start-guide)
- [Secure Infrastructure](https://safe.truevault.com/secure-infrastructure)
- [API Overview](https://safe.truevault.com/api-overview)
### Latest Posts
### Contact Us
201 Mission Street, 12th Floor
San Francisco, CA 94105
Email: [hello@truevault.com](mailto:hello@truevault.com)
2024 © All Rights Reserved. [Privacy Policy](https://privacy.truevault.com/privacy-policy) | [Terms of Use](https://www.truevault.com/legal/truevault-terms-of-use) | [Supplemental Terms](https://www.truevault.com/legal/truevault-supplemental-terms-of-use) | [California Privacy Notice](https://privacy.truevault.com/privacy-policy#california-privacy-notice)