**the following is not legal advice, nor expert privacy advice as I am not a lawyer nor data professional. as with all things on this website and in life, practice discernment and do your own thorough research.**

The Utah UCPA states that any Utah resident can request the deletion of their data from businesses that profit from the sale or distribution of data on a large scale, and that the business must respond within 45 days to the request.

Read more on the Utah Division of Consumer Protection’s website.

Utah UCPA

357 § 13-61-201. Consumer rights — Access — Deletion — Portability — Opt out of
358 certain processing.
359 (1) A consumer has the right to:
360 (a) confirm whether a controller is processing the consumer’s personal data; and
361 (b) access the consumer’s personal data.
362 (2) A consumer has the right to delete the consumer’s personal data that the consumer
363 provided to the controller.
364 (3) A consumer has the right to obtain a copy of the consumer’s personal data, that the
365 consumer previously provided to the controller, in a format that:
366 (a) to the extent technically feasible, is portable;
367 (b) to the extent practicable, is readily usable; and
368 (c) allows the consumer to transmit the data to another controller without impediment,
369 where the processing is carried out by automated means.
370 (4) A consumer has the right to opt out of the processing of the consumer’s personal
371 data for purposes of:
372 (a) targeted advertising; or
373 (b) the sale of personal data.

Utah Resident Sample Email:

Dear [company name],

I am submitting a request for implementation of the following rights under § 13-61-201(2) & § 13-61-201(4) of the Utah UCPA which grant Utah residents certain rights in relation to protection of their personal data information:

1) To obtain erasure (deletion) of personal data (information) without undue delay;
2) To withdraw any consent given to the processing of personal data (information);
3) To object to processing of personal data (information) concerning the below individual, including but not limited to profiling and direct marketing.

I can be identified by my details below:

Name:
Address:
E-mail address:

Please confirm your compliance with the request without undue delay and in any event within 45 (forty five) days of receipt of this request.

Thank you,