Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I store personal information about my customers in Utah? What are the requirements?

Storing Personal Information of Customers in Utah

Yes, you can store personal information about your customers in Utah, but you must comply with the requirements set forth in the Utah Administrative Code (UTAC) R590-206-6, R708-43-5, R590-206-13, and R590-206-7. Additionally, you must implement and maintain reasonable procedures to prevent unlawful use or disclosure of personal information collected or maintained in the regular course of business and destroy, or arrange for the destruction of, records containing personal information that are not to be retained by the person [3.1].

Annual Privacy Notice to Customers Required

Under UTAC R590-206-6, you must provide a clear and conspicuous notice to customers that accurately reflects your privacy policies and practices not less than annually during the continuation of the customer relationship.

Procedures for Verification of Information

UTAC R708-43-5 sets forth the procedures for verification of information.

Limits on Redisclosure and Reuse of Nonpublic Personal Financial Information

UTAC R590-206-13 sets forth the limits on the rediscolsure and reuse of nonpublic personal financial information.

Information to be Included in Privacy Notices

UTAC R590-206-7 sets forth the information to be included in privacy notices.

Other Exceptions to Notice and Opt Out Requirements for Disclosure of Nonpublic Personal Financial Information

UTAC R590-206-17 sets forth other exceptions to notice and opt-out requirements for disclosure of nonpublic personal financial information.

Exception to Opt Out Requirements for Disclosure of Nonpublic Personal Financial Information for Service Providers and Joint Marketing

UTAC R590-206-15 sets forth an exception to opt-out requirements for disclosure of nonpublic personal financial information for service providers and joint marketing.

Protection of Personal Information

UTCO 13-45-301 and UTCO 13-44-201 provide additional requirements for the protection of personal information in Utah [2.1][3.1].

In summary, you can store personal information about your customers in Utah, but you must comply with the requirements set forth in the UTAC and implement reasonable procedures to protect personal information.

Source(s):
Jurisdiction

Utah