Laws and data licensing
Utah Consumer Privacy Act and AI data licensing
Short answer
If your records include personal data of Utah residents, licensing them could count as a "sale" unless the data is properly de-identified first. That is one reason personal details are removed before anything is shared.
What it covers#
Utah. Utah's comprehensive consumer privacy law, covering personal data of Utah residents held by businesses that meet its thresholds.
Key points for licensing#
- Usually applies only above set thresholds of consumers or revenue from selling data
- Gives consumers rights to access, delete and opt out of sale or targeted advertising
- Properly de-identified data, with public commitments not to re-identify it, is generally treated differently from personal data
- Sensitive data such as health, precise location or children's data typically needs consent
How SourceX handles it#
- Personal details are removed before anything is shared
- Rules that apply are assessed deal by deal with your counsel
- Records that can't be cleared are excluded
- Your company approves every release
General information, not legal advice. Laws change and their application depends on your facts. SourceX assesses which rules apply deal by deal with your counsel. Last reviewed 2026-10-09.