Utah Consumer Privacy Act (UCPA)
Maintain compliance using Classify360.
The Utah Consumer Privacy Act (UCPA) was signed into law in 2022 and takes effect on December 31, 2023. Under UCPA, businesses that control or process Utah consumers’ personal data must uphold new rights afforded to those consumers. This act does not include a requirement to conduct personal data assessments for some types of processing activities, so it’s considered one of the most business-friendly privacy acts in the United States.
Book an Intro Call
How Classify360 Ensures UCPA Compliance
Enable Data Privacy and Regional Regulation
Identify data falling under UCPA and other geographically-based regulations to take appropriate compliance measures.
No Additional Copies of Data
Classify360’s inverted index provides a rapid, thorough search of connected data sources without making copies and the associated additional risk. Chain of custody is automatically documented and maintained, clearly demonstrating files were not opened or altered by the Classify360 platform. The CDMHub ensures only data stewards with appropriate security permissions have access to data for review purposes.
Avoid Financial and Reputational Damages
Failure to comply with UCPA may result in punitive action taken by the Utah Attorney General, who has the exclusive ability to enforce UCPA and may demand organizations that fail to comply recover actual damages to the consumer and render fines up to $7,500 per incident. Furthermore, lack of compliance can cause irreversible reputational damage.
Actionable Workflows to Maintain Historical and Ongoing Compliance
Achieve historical compliance with untouched dark data and maintain ongoing compliance as new data is created by placing Classify360 at the top of your data workflows.
Comprehensive Data Compliance Solution at Scale
Rapidly classify any amount of data, from gigabytes to petabytes – even exabytes. As quickly as your organization produces data, Classify360 can classify and take action on it to ensure you are never outside the parameters of UCPA compliance.
Take Action, Stay Compliant
Authorized data stewards take informed action within Classify360’s CDMHub to migrate, archive, preserve, or delete data per UCPA standards.
Are You Ready to Be UCPA Compliant?
Frequently Asked Questions
UCPA applies to controllers (persons doing business in Utah who determines the purposes for which and means by which the personal data is processed, regardless of whether that person makes the determination al one or with others) and processors (persons processing personal data on behalf of a controller) of data. This law applies to controllers and processors operating or targeting residents of Utah, with an annual revenue of $25,000,000 or more, and either:
- Deriving over 50% of their gross revenue from the sale of personal data or control or process the personal data of 25,000 or more consumers
- Controlling and processing the personal data of 100,000 or more customers annually
