Observed Signal · May 30, 2023 · Policy Update · Source: CMSWire · Impact: 3/5 · Sentiment: Neutral
Utah Data Privacy Act: What Marketers Need to Know
The Utah Consumer Privacy Act (UCPA), signed into law in March 2022 and effective December 31, 2023, is among the most business-friendly state data privacy laws. It gives companies nearly two years to comply, exempts small businesses, and does not require consumer consent for processing sensitive data or targeted advertising. The law excludes aggregated, de-identified, and publicly available data from protection, allowing marketers to share anonymized consumer insights. Businesses subject to the law must provide opt-out mechanisms and respond to consumer requests. Experts advise mapping data, establishing compliance programs aligned with GDPR or CPRA, and preparing for potential federal preemption.
New state privacy law with business-friendly provisions affects marketing practices in Utah, but limited to a single state and not industry-shifting.
Track Real-Time Privacy Signals & Market Shifts
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- Utah Consumer Privacy Act (UCPA) signed March 2022, effective Dec 31, 2023.
- Applies to businesses with annual revenue of $25M+ and processing data of 100,000+ consumers.
- UCPA does not require consumer consent for processing sensitive data or using data for targeted advertising.
- Aggregated, de-identified, and publicly available data are exempt from the law's protections.
- Businesses with revenue under $25M are exempt from UCPA requirements.
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
Asos confirms data breach after rogue app notification
UK fashion retailer Asos has confirmed a data breach involving customers' personal information. Hackers broke into a third-party platform hosting data used for customer communications, stealing names, contact information, home addresses, phone numbers, email addresses, and customer profile notes including search queries. The hackers, calling themselves Xuanye Group, sent an unauthorized push notification through Asos' own app, referencing the compromise of data hosted on Snowflake, a cloud data platform. The notification pressured the company to engage or risk a leak. The attackers reportedly gained access by impersonating a trusted contact to obtain login credentials. Snowflake said its own systems were not breached. Asos has 17 million customers. The incident follows a similar breach at fintech firm Betterment earlier in the year.
German Federal Court Hears Cookie Storage Liability Case
Germany's Federal Court of Justice (BGH) is hearing a case on whether a technology and analytics company is liable for storing cookies on users' devices without consent on third-party websites. The plaintiff seeks damages, with lower courts awarding €1,500 and then €100. The case centers on the interpretation of the TDDDG. A ruling is not expected immediately. Legal experts say a BGH confirmation of the lower court's view would require companies to implement technical and organizational measures beyond contractual assurances to prevent unauthorized cookie placement. Meanwhile, the EU Commission proposed in November 2025 to reduce cookie banner pop-ups by allowing users to store preferences on their devices. The proposal faces scrutiny in the European Parliament and Council, with consumer advocates concerned about member states' resistance.
Apple Safari Blocklist Pushes Publishers to Trusted Server
Apple's latest software update has started blocking ad tech companies that track users for targeted advertising in Safari, prompting publishers to urgently revisit IAB Tech Lab's Trusted Server. This server-side solution moves ad auctions from users' devices to publisher-controlled servers, bypassing Apple's blocklist. Publishers like Paradium have already adopted it, while others are evaluating their options. The move highlights Apple's growing control over digital advertising, raising concerns about market power and the impact on publisher revenue. As Apple expands its own ad business, the blocklist underscores the shifting power dynamics in the ad tech ecosystem.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.