SB 290 strengthens privacy protections for victims and witnesses in Utah criminal cases by regulating access to their nonpublic electronic data, such as personal messages or intimate images shared with law enforcement. It requires law enforcement to implement secure "virtual rooms" for defendants' attorneys to review sensitive data without copying it, creates a presumption against disclosing intimate images, and mandates clear disclosure of devices used in investigations. The bill directly affects victims/witnesses (who gain greater control over their private information), law enforcement (who must adopt new policies), and defendants (who must seek court approval to access nonpublic data). Key provisions include defining "nonpublic victim or witness data," requiring prosecutors to notify defendants about device searches, and limiting data sharing to specific court-approved scenarios. The bill makes no changes to existing evidence disclosure rules under Utah Rules of Criminal Procedure.
HB 181 enacts Utah's adoption of the Uniform Electronic Estate Planning Documents Act. It allows electronic versions of non-will estate planning documents (like powers of attorney, living wills, and trust documents) to have the same legal standing as paper copies. The bill requires electronic signatures to be attributable to the person signing and sets standards for notarization, witnessing, and document retention. It ensures these electronic documents cannot be rejected in court solely because they are digital. This directly affects individuals creating estate plans and legal professionals handling such documents.
HB 408 requires social media platforms to let users transfer portions of their personal data - including connections, content, and interactions - to other platforms within five business days. It mandates real-time data sharing when users switch services, requires explicit user consent before sharing comments or interactions during transfers, and protects platforms from penalties for temporary technical issues if they make good-faith fixes. The bill clarifies that platforms must provide data in a portable, usable format but exempts them from sharing internal algorithms, derived data, or proprietary formats that lack industry standards. This directly affects Utah social media users and platforms operating in the state, focusing on user control over their digital data.
SB 183 prohibits law enforcement officers or their agents from tampering with, repositioning, or disabling privately or commercially owned surveillance cameras without specific authorization. The law allows exceptions when the camera owner consents, a court issues a warrant beforehand, or during urgent emergencies - requiring officers to notify owners within 24 hours or obtain a court order as soon as possible after the emergency ends. This directly affects camera owners (including businesses and residents) and law enforcement agencies operating in Utah. The bill creates two new Utah Code sections (53-25-1201 and 53-25-1202) and excludes trail cameras from its provisions. It takes effect on May 6, 2026.
SB 296 requires Utah schools and colleges to obtain clear, informed consent from students before sharing their educational data (like transcripts, enrollment records, and course history). It mandates a secure digital consent system by July 2027, prohibits bundling unrelated terms with consent requests, and ensures students can revoke consent anytime. The bill directly affects students (including minors, where parents must consent) and educational institutions, while prohibiting schools from restricting consent rights or requiring waivers of unrelated privacy protections. It aligns with federal FERPA law but adds Utah-specific rules for data disclosure, including creating a private right of action if third parties violate these requirements.
SB 298, the "Programmable Money Amendments," modifies Utah's Uniform Commercial Code to regulate digital payment methods (like digital tokens or programmable currency). It directly affects businesses that issue or accept programmable money by requiring them to offer free non-digital payment options and banning discrimination based on political views, religion, medical history, or lawful firearm ownership. The bill prohibits denying transactions due to environmental/social/governance compliance or diversity programming, mandates written explanations for denied transactions within 30 days, and allows affected parties to seek punitive damages or revoke an issuer’s license. It explicitly clarifies that the law does not restrict cryptocurrency purchases or sales by any party.
HB 450 amends Utah's Government Data Privacy Act and Government Records Access and Management Act to strengthen state data privacy oversight. It restructures the Utah Privacy Commission to include state agencies, cities, counties, and education representatives, transfers oversight to a new Utah Office of Data Privacy, and creates a data privacy ombudsman to handle complaints. The bill requires joint studies on government use of passive data collection technology and removes duplicative rules while expanding correction procedures beyond personal data. These changes directly affect Utah state and local government entities that collect or manage public data.
SB 73 requires online platforms providing content deemed harmful to minors to implement age verification systems. It imposes an excise tax on these platforms, with revenues funding mental health programs and enforcement through the Division of Consumer Protection. The bill creates two dedicated accounts for these funds and grants the Division authority to investigate violations, impose fines, and establish verification standards. Platforms failing to comply face civil penalties, while approved verification methods receive a safe harbor from liability.
HB 357 updates Utah's privacy law to cover data collected by motor vehicles. It requires car manufacturers to add privacy controls in vehicles, exempts safety data (like speed or braking) from needing driver consent, and mandates the Motor Vehicle Division to inform drivers about their privacy rights. The law directly affects car manufacturers and applies to personal data collected from drivers through their vehicles. This creates new transparency requirements for vehicle data while allowing safety-related information to be used without explicit permission.
SB 152 clarifies how public school districts and higher education institutions handle student data by requiring clear explanations about what data is collected, how it will be used, and the right for families to opt out of data sharing. The bill specifically addresses transparency around data practices under existing law (Section 53E-9-402(1)), mandating that schools disclose collection methods, usage purposes, and opt-out options to parents or guardians. It directly affects school districts, colleges, and families by standardizing data privacy communication. The bill focuses on concrete policy changes to improve transparency, not on new funding or program creation. (3 sentences)
