Can I skip obtaining consent to disclose personal information for a business purpose in Utah? What are the requirements?

Based on the context documents, you cannot skip obtaining consent to disclose personal information for a business purpose in Utah. The Utah Code requires any person who conducts business in the state and maintains personal information to implement and maintain reasonable procedures to prevent unlawful use or disclosure of personal information collected or maintained in the regular course of business ^[2.2]. Additionally, any personally identifiable information an individual provides to a State website shall be used solely by the State, its entities, and third party agents with whom it has contracted to perform a state function on its behalf, unless this rule is superseded by a federal statute, federal regulation, or State statute in which case the personally identifiable information shall be used by other parties only to the extent required by the superseding federal statute, federal regulation or State Statute, or the information is designated as public record by an individual State agency as authorized under Title 63G, Chapter 2 of the Utah Code, Government Records Access and Management Act ^[3.2][4.2].

Therefore, obtaining consent is required to disclose personal information for a business purpose in Utah.

Source(s):

• [2.2] Protection of personal information. (Effective 5/14/2019)
• [3.2] Use of Personally Identifiable Information.
• [4.2] Use of Personally Identifiable Information.

Jurisdiction

Utah

• Privacy