Child Protection Registry

Utah CPR

Children · Marketing

Lets parents and schools register children's email addresses and other contact points; senders of adult-product or harmful-to-minors marketing must scrub their lists against the registry.

Where: Utah
Citation: Utah Code Title 13, Chapter 39 (13-39-101 to 13-39-304)
Status: In force
Last amended: 2025-05-07
Enforced by: Utah Attorney General (Internet Crimes Against Children unit)
People can sue: Yes
Penalties: Criminal penalties from class B misdemeanor to second-degree felony for registry misuse (13-39-301); private action for the greater of actual damages or $1,000 per communication plus fees (13-39-302); AG fines up to $2,500 per communication, $5,000 if intentional after notice (13-39-303).
Applies to: Anyone sending a communication to a contact point or domain registered for more than 30 days, if it advertises products minors may not lawfully buy or contains or promotes material harmful to minors (13-39-202(1))

What a privacy notice must say

Under the consent exception, verify adult age by in-person ID inspection, keep signed written consent, notify the unit, and include in each communication a notice that consent may be rescinded with opt-out information.Utah Code 13-39-202(4) · Only if: Sender relies on the adult consent exception

Practices it requires

Do not send covered communications to contact points or domains registered for more than 30 days.Utah Code 13-39-202(1)

Registration

Scrub sending lists through the registry mechanism and pay the associated fees.Utah Code 13-39-201(3)

Other duties

Defense for a sender that relied on the registry mechanism.Utah Code 13-39-304

Sources

Checked against these sources on 2026-09-23 by research agent (Claude), primary sources.

Unverified: Enacted by Laws of Utah 2004 ch. 338; bill number and effective date were not looked up.

Research reference, not legal advice.