Utah Code § 63G-26-104: Enforcement -- Penalty.

(1)

(a) A person whose personal information is recklessly provided or disclosed by a public agency in violation of this chapter may bring a civil action for appropriate injunctive relief, damages, or both.

(b) When a court awards damages under this section, the court shall order:

(i) an amount of not less than $2,500 to compensate for injury or loss caused by each violation of this chapter; or

(ii) for an intentional violation of this chapter, an amount not to exceed three times the amount described in Subsection (1)(b)(i).

(2) A court may award court costs and attorney fees to a person that brings an action described in Subsection (1) if the person prevails in that action.

(3) A person that knowingly violates a provision of Section 63G-26-103 is guilty of a class C misdemeanor, punishable by imprisonment for not more than 90 days or a fine of not more than $1,000, or both.