Utah Code 13-61-201. Consumer rights — Access — Deletion — Portability — Opt out of certain processing
Current as of: 2024 | Check for updates
|
Other versions
(1) A consumer has the right to:
Terms Used In Utah Code 13-61-201
- Consumer: means an individual who is a resident of the state acting in an individual or household context. See Utah Code 13-61-101
- Controller: means a person doing business in the state who determines the purposes for which and the means by which personal data are processed, regardless of whether the person makes the determination alone or with others. See Utah Code 13-61-101
- Person: means :(24)(a) an individual;(24)(b) an association;(24)(c) an institution;(24)(d) a corporation;(24)(e) a company;(24)(f) a trust;(24)(g) a limited liability company;(24)(h) a partnership;(24)(i) a political subdivision;(24)(j) a government office, department, division, bureau, or other body of government; and(24)(k) any other organization or entity. See Utah Code 68-3-12.5
- Personal data: means information that is linked or reasonably linkable to an identified individual or an identifiable individual. See Utah Code 13-61-101
- Right: means a consumer right described in Section
13-61-201 . See Utah Code 13-61-101- Targeted advertising: means displaying an advertisement to a consumer where the advertisement is selected based on personal data obtained from the consumer's activities over time and across nonaffiliated websites or online applications to predict the consumer's preferences or interests. See Utah Code 13-61-101
(1)(a) confirm whether a controller is processing the consumer’s personal data; and(1)(b) access the consumer’s personal data.
(2) A consumer has the right to delete the consumer’s personal data that the consumer provided to the controller.
(3) A consumer has the right to obtain a copy of the consumer’s personal data, that the consumer previously provided to the controller, in a format that:
(3)(a) to the extent technically feasible, is portable;
(3)(b) to the extent practicable, is readily usable; and
(3)(c) allows the consumer to transmit the data to another controller without impediment, where the processing is carried out by automated means.
(4) A consumer has the right to opt out of the processing of the consumer’s personal data for purposes of:
(4)(a) targeted advertising; or
(4)(b) the sale of personal data.
(5) Nothing in this section requires a person to cause a breach of security system as defined in Section 13-44-102.