Utah Consumer Privacy Act, sensitive and biometric data provisions

Utah Code 13-61-101(6), 13-61-101(32)(a)(ii), 13-61-302(3)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 31 December 2023.

A sensitive categories rule binding private bodies.

As of 23 August 2026.

What it requires

Give Utah consumers clear notice and an opportunity to opt out before processing their sensitive data, including biometric data such as a voiceprint, retina scan, iris scan, or fingerprint collected for the purpose of identifying a specific individual.
Treat an identifier your app generates only from a photograph, or from a video or audio recording, as outside biometric data under this law; this notice-and-opt-out duty does not reach it.

What it reaches

Excludes recording-derived identifiersYes

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Defines biometric data as data generated by automatic measurement of an individual's unique biological characteristics, naming fingerprint, voiceprint, retina, iris, or any other unique biological pattern used to identify a specific individual, but excludes any physical or digital photograph, video or audio recording, or data generated from one.

Biometric and genetic data become sensitive data, alongside racial or ethnic origin, religious belief, sexual orientation, citizenship or immigration status, certain medical information, and specific geolocation, only when processed for the purpose of identifying a specific individual. A controller may not process sensitive data without first giving clear notice and an opportunity to opt out, an opt-out rather than opt-in model.

When LexLint raises it

processes_biometrics
processes_voice
trains_models
deploys_chatbot

Read the law

official Utah Code text, Utah State Legislature

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app