Can I collect cookie information from participants in Utah? What are the requirements?

Collecting Cookie Information in Utah

In Utah, the collection of cookie information from users of a governmental website is subject to certain requirements. According to UTCO 63D-2-103, a governmental entity may not collect personally identifiable information related to a user of the governmental entity’s governmental website unless the governmental entity has taken reasonable steps to ensure that on the day on which the personally identifiable information is collected the governmental entity’s governmental website complies with Subsection (2).

Subsection (2) of UTCO 63D-2-103 requires that a governmental website shall contain a privacy policy statement that discloses the personally identifiable information collected by the governmental entity, a summary of how the personally identifiable information is used by the governmental entity or the governmental website operator, the practices of the governmental entity or the governmental website operator related to disclosure of personally identifiable information collected, the procedures, if any, by which a user of a governmental entity may request access to the user’s personally identifiable information and access to correct the user’s personally identifiable information, and a general description of the security measures in place to protect a user’s personally identifiable information from unintended disclosure.

Therefore, if you want to collect cookie information from participants in Utah, you must ensure that your website complies with the requirements of UTCO 63D-2-103. This means that you must have a privacy policy statement that discloses the personally identifiable information collected by your website, how it is used, and the security measures in place to protect it. Additionally, you must provide users with the ability to request access to their personally identifiable information and to correct it if necessary.

It is important to note that the collection of cookie information may be subject to additional requirements under federal law, such as the Children’s Online Privacy Protection Act (COPPA) and the General Data Protection Regulation (GDPR) if you collect information from users in the European Union. Therefore, it is recommended that you consult with a legal professional to ensure that your website complies with all applicable laws and regulations.

Source(s):

• [4.2] Collection of personally identifiable information.

Jurisdiction

Utah

• Privacy