Data processors must comply with the UCPA when handling consumer data. This includes granting consumers the right to access, delete, and opt out of the sale of their data, as well as providing a clear privacy policy outlining data collection, use, and sharing practices. Data processors are also responsible for protecting consumer data from misuse and breaches.

The Utah Consumer Privacy Act (UCPA) is enforced by the Utah Attorney General’s Office, which investigates violations and conducts audits to ensure compliance. The Attorney General can seek civil penalties, damages, and injunctive relief for willful violations. Consumer complaints or inquiries regarding the UCPA can be submitted to the Attorney General’s Office for investigation and action when necessary.

The UCPA requires businesses to give consumers rights over their data, including access, deletion, and opting out of data sales. Businesses must inform consumers of any data breaches or misuse and provide transparency on how their data is being used. Additionally, businesses must offer a privacy policy detailing how consumer data is collected, used, and shared.

To assure UCPA compliance for your business, start by implementing clear data protection policies and procedures. One of the easiest ways to simplify compliance is by using a Consent Management Platform (CMP) like Consentmo, which is designed specifically for Shopify stores. Our app helps you manage cookie consent, data requests, and user rights, verifying your store meets UCPA requirements without hassle.