Utah Code § 63A-20-701: Duty of loyalty.

The department, a digital wallet provider, a verifier, a relying party, and a digital guardian shall refrain from practices or activities related to the processing of an individual's identity attributes from a digital identity that:

(1) conflict with the best interests of an individual;

(2) take advantage of or otherwise exploit an individual;

(3) result in a disproportionate risk to an individual;

(4) are to an individual's detriment; or

(5) cause harm to an individual.