{"data":{"id":"us-ut/utah-code-13-61-303","jurisdiction":"us-ut","citation":"Utah Code § 13-61-303","heading":"Processing deidentified data or pseudonymous data.","body":"(1) The provisions of this chapter do not require a controller or processor to:\n(a) reidentify deidentified data or pseudonymous data;\n(b) maintain data in identifiable form or obtain, retain, or access any data or technology for the purpose of allowing the controller or processor to associate a consumer request with personal data; or\n(c) comply with an authenticated consumer request to exercise a right described in Subsections 13-61-202(1) through (3), if:\n(i)\n(A) the controller is not reasonably capable of associating the request with the personal data; or\n(B) it would be unreasonably burdensome for the controller to associate the request with the personal data;\n(ii) the controller does not:\n(A) use the personal data to recognize or respond to the consumer who is the subject of the personal data; or\n(B) associate the personal data with other personal data about the consumer; and\n(iii) the controller does not sell or otherwise disclose the personal data to any third party other than a processor, except as otherwise permitted in this section.\n(2) The rights described in Subsections 13-61-201(1) through (3) do not apply to pseudonymous data if a controller demonstrates that any information necessary to identify a consumer is kept:\n(a) separately; and\n(b) subject to appropriate technical and organizational measures to ensure the personal data are not attributed to an identified individual or an identifiable individual.\n(3) A controller who uses pseudonymous data or deidentified data shall take reasonable steps to ensure the controller:\n(a) complies with any contractual obligations to which the pseudonymous data or deidentified data are subject; and\n(b) promptly addresses any breach of a contractual obligation described in Subsection (3)(a).","path":["Title 13 Commerce and Trade","Chapter 13-61 Utah Consumer Privacy Act","Part 13-61-3 Requirements for Controllers and Processors"],"source_url":"https://le.utah.gov/xcode/Title13/Chapter61/13-61-S303.html","current_through":"2026 General Session","vintage":"","retrieved_at":"2026-09-03T11:34:33Z","sha256":"bd6d383094cd2404894f1698d244f51b4868e940eb719b1584878e6a40b84715","source_id":"us-ut","stale":false,"prev":"us-ut/utah-code-13-61-302","next":"us-ut/utah-code-13-61-304"},"notice":"GroundRules: Original legal text. Not legal advice."}