Law / United States / 
Utah
Utah Consumer Privacy Act, processing deidentified or pseudonymous data
In force since .
A de-identification rule binding private bodies.
- Obligation class
- Prohibition
- Audit expectation
- none
What it requires
- When you use pseudonymous data or deidentified data, take reasonable steps to comply with any contractual obligations the data are subject to, and promptly address any breach of such an obligation (Utah Code 13-61-303(3)).
These lines are LexLint's reading of the law's text.
What it makes you log
Logging duty
Section 13-61-303(3) requires a controller to take reasonable steps on contractual obligations that attach to deidentified or pseudonymous data. It states no log or record duty.
- Kind
- None
- As of
What this law does
Section 13-61-303(3) requires a controller who uses pseudonymous data or deidentified data to take reasonable steps to ensure it complies with any contractual obligations to which the data are subject and promptly addresses any breach of such an obligation.
When LexLint raises it
When your app profile says your app processes personal data or processes de-identified data.
Back to the example · Lint your app
Page updated .