Protection of Personal Information Act

Utah's data security, disposal, and breach notification law. It covers name plus SSN, financial account or card number with access code, or driver license or state ID number. It requires reasonable safeguards, secure disposal, and notice to affected Utah residents, and at scale to the Attorney General, the Utah Cyber Center, and consumer reporting agencies.