Cybersecurity Affirmative Defense Act

Utah Cybersecurity Affirmative Defense Act
active

Enacted by 2021 H.B. 80 and unchanged since, it gives a defense against claims of failing to implement reasonable controls, respond, or notify after a breach if the person had a written cybersecurity program reasonably conforming to NIST, CIS, ISO 27000, PCI DSS, HIPAA, GLBA, 13-44, or similar frameworks.

Jurisdiction

Utah

Jurisdiction Type

state

Country

United States

Effective Date

5/5/2021

Enforcing Authority

None (creates an affirmative defense)

Fines Under This Regulation

0

Total Fine Amount (USD)

--

View Official Text →