UCPA Compliance
Pandectes GDPR Compliance helps Shopify stores achieve compliance with the Utah Consumer Privacy Act (UCPA). Our advanced scanning tools identify cookies and tracking technologies, generating detailed reports that classify them according to UCPA guidelines. Simplify your path to data privacy compliance with Pandectes GDPR Compliance.
What is UCPA?
The Utah Consumer Privacy Act (UCPA) is a data privacy law that protects the privacy rights of Utah residents and sets requirements for companies operating in the state. Effective March 24, 2022, the UCPA focuses on the sale of personal data and targeted advertising. It defines a sale as the exchange of personal data for monetary consideration to a third party, unlike California’s CCPA and CPRA.
The UCPA follows an opt-out model, allowing the collection, sale, and use of personal data for targeted advertising without explicit consent, except for data involving young people. In such cases, consent must be obtained from a parent or legal guardian. Consumers can opt out of the sale or use of their data for targeted advertising, and businesses must honor these requests and stop using the data for these purposes.
Who does the UCPA apply to?
The UCPA applies to both controllers and processors of personal data. A controller is anyone conducting business in Utah who decides how and why personal data is processed, either alone or with others.
What happens if I don't comply with the UCPA?
Enforcement of the UCPA involves consumer complaints managed by the Division of Consumer Protection. Persistent violations may lead to action from the attorney general, resulting in fines up to $7,500.
When will the UCPA go into effect?
The UCPA takes effect on December 31, 2023, granting rights to consumers and imposing obligations on businesses in Utah.
Complying with the UCPA
As data privacy laws evolve, including new regulations in states like Indiana, Iowa, Tennessee, and Montana, compliance can be challenging. Stay informed about new legislation and review new laws with legal counsel to ensure compliance.
Consider using a Consent Management Platform (CMP) like Pandectes GDPR Compliance to streamline the process. Our CMP offers customizable consent management, automation of data subject requests, and tools for cookie and vendor management, helping Shopify stores maintain compliance in a changing data privacy landscape.