Utah Code 13-44-201. Protection of personal information
Current as of: 2024 | Check for updates
|
Other versions
(1) Any person who conducts business in the state and maintains personal information shall implement and maintain reasonable procedures to:
Terms Used In Utah Code 13-44-201
- Person: means :(24)(a) an individual;(24)(b) an association;(24)(c) an institution;(24)(d) a corporation;(24)(e) a company;(24)(f) a trust;(24)(g) a limited liability company;(24)(h) a partnership;(24)(i) a political subdivision;(24)(j) a government office, department, division, bureau, or other body of government; and(24)(k) any other organization or entity. See Utah Code 68-3-12.5
- Personal information: means a person's first name or first initial and last name, combined with any one or more of the following data elements relating to that person when either the name or date element is unencrypted or not protected by another method that renders the data unreadable or unusable:
(4)(a)(i) Social Security number;(4)(a)(ii)(4)(a)(ii)(A) financial account number, or credit or debit card number; and(4)(a)(ii)(B) any required security code, access code, or password that would permit access to the person's account; or(4)(a)(iii) driver license number or state identification card number. See Utah Code 13-44-102- State: when applied to the different parts of the United States, includes a state, district, or territory of the United States. See Utah Code 68-3-12.5
(1)(a) prevent unlawful use or disclosure of personal information collected or maintained in the regular course of business; and(1)(b) destroy, or arrange for the destruction of, records containing personal information that are not to be retained by the person.(2) The destruction of records under Subsection (1)(b) shall be by:(2)(a) shredding;(2)(b) erasing; or(2)(c) otherwise modifying the personal information to make the information indecipherable. - Personal information: means a person's first name or first initial and last name, combined with any one or more of the following data elements relating to that person when either the name or date element is unencrypted or not protected by another method that renders the data unreadable or unusable: