On March 13, 2024, Utah's Governor Spencer Cox officially signed the Utah Artificial Intelligence Policy Act (“UAIPA” or “Act”) into law, making Utah the first US state to have a regulation that imposes transparency obligations on organizations that use Generative AI (GenAI) technologies.
All 50 states, the District of Columbia, Guam, Puerto Rico and the Islands have laws requiring private businesses, and in most states, governmental entities as well, to notify individuals of security breaches of information involving personally identifiable information.
"Personal information" does not include information regardless of its source, contained in federal, state, or local government records or in widely distributed media that are lawfully made available to the general public. "Record" includes materials maintained in any form, including paper and electronic.
Title 13 Chapter 44 Part 2 Section 202. Personal information -- Disclosure of system security breach. 13-44-202.
Thus, although the basic rule of confidentiality is that a victim's information is not shared outside an agency unless the victim gives permission to do so, it is important to inform victims before they share information whether, when and under what circumstances information may be further disclosed.
The UCPA provides Utah consumers with several essential rights concerning their personal data. You have the right to confirm whether a business is processing your personal data. If a business is processing your data, you have the right to access that data and request it be deleted.
The UCPA requires data controllers—companies that conduct business in Utah, produce goods or services targeted at Utah residents, have an annual revenue of $25 million or more, and control or process the personal data for a certain threshold of consumers—to provide notice to consumers that identify categories of and ...
Protection of personal information. destroy, or arrange for the destruction of, records containing personal information that are not to be retained by the person. otherwise modifying the personal information to make the information indecipherable.
A person who owns or licenses computerized data that includes personal information concerning a Utah resident shall, when the person becomes aware of a breach of system security, conduct in good faith a reasonable and prompt investigation to determine the likelihood that personal information has been or will be misused ...
Franchisor's obligations related to service -- Franchisor audits -- Time limits. the time allowance for the performance of work and service. The schedule of compensation described in Subsection (1) shall include reasonable compensation for diagnostic work, as well as repair service, parts, and labor.