Utah 2025 Regular Session

Utah Senate Bill SB0150 Compare Versions

OldNewDifferences
1-Enrolled Copy S.B. 150
1+02-04 15:59 1st Sub. (Green) S.B. 150
2+Kirk A. Cullimore proposes the following substitute bill:
23 1
34 Nonpublic Personal Information Amendments
45 2025 GENERAL SESSION
56 STATE OF UTAH
67 Chief Sponsor: Kirk A. Cullimore
7-House Sponsor: Anthony E. Loubet
8+House Sponsor:
89 2
910
1011 3
1112 LONG TITLE
1213 4
1314 General Description:
1415 5
1516 This bill addresses the Notice of Intent to Sell Nonpublic Personal Information Act.
1617 6
1718 Highlighted Provisions:
1819 7
1920 This bill:
2021 8
2122 ▸ modifies definitions;
2223 9
2324 ▸ clarifies that the liability and remedy under the Notice of Intent to Sell Nonpublic
2425 10
2526 Personal Information Act (act) is an individual action and not a class action or action in
2627 11
2728 a representative capacity;
2829 12
2930 ▸ addresses the statute or limitations;
3031 13
3132 ▸ finds that the act's prohibition of class actions since January 1, 2004, is a remedy
3233 14
3334 provision and not procedural; and
3435 15
3536 ▸ makes technical and conforming amendments.
3637 16
3738 Money Appropriated in this Bill:
3839 17
3940 None
4041 18
4142 Other Special Clauses:
4243 19
4344 None
4445 20
4546 Utah Code Sections Affected:
4647 21
4748 AMENDS:
4849 22
4950 13-37-102, as enacted by Laws of Utah 2003, Chapter 97
5051 23
5152 13-37-203, as enacted by Laws of Utah 2003, Chapter 97
5253 24
5354
5455 25
5556 Be it enacted by the Legislature of the state of Utah:
5657 26
5758 Section 1. Section 13-37-102 is amended to read:
5859 27
59-13-37-102 . Definitions. S.B. 150 Enrolled Copy
60+13-37-102 . Definitions.
6061 28
6162 As used in this chapter:
63+1st Sub. S.B. 150 1st Sub. (Green) S.B. 150 02-04 15:59
6264 29
6365 (1) "Affiliate" means a person that controls, is controlled by, or is under common control
6466 30
6567 with:
6668 31
6769 (a) a commercial entity; and
6870 32
6971 (b)(i) directly; or
7072 33
7173 (ii) indirectly through one or more intermediaries.
7274 34
7375 (2)(a) Subject to Subsection (2)(b), "commercial entity" means a person that:
7476 35
7577 [(i) has an office or other place of business located in the state; and]
7678 36
7779 [(ii) in the ordinary course of business transacts a consumer transaction in this state.]
7880 37
7981 (i) maintains a physical office in the state; and
8082 38
8183 (ii) in the ordinary course transacts business at the physical office with consumers
8284 39
8385 located in the state.
8486 40
8587 (b) "Commercial entity" does not include:
8688 41
8789 (i) a governmental entity; or
8890 42
8991 (ii) an entity providing services on behalf of a governmental entity.
9092 43
9193 (3) "Compensation" means anything of economic value that is paid or transferred to a
9294 44
9395 commercial entity for or in direct consideration of the disclosure of nonpublic personal
9496 45
9597 information.
9698 46
9799 (4)(a) "Consumer transaction" means:
98100 47
99101 (i) a sale, lease, assignment, award by chance, or other written or oral transfer or
100102 48
101103 disposition:
102104 49
103105 (A) that is initiated or completed in this state; and
104106 50
105107 (B) of:
106108 51
107109 (I) goods;
108110 52
109111 (II) services; or
110112 53
111113 (III) other tangible or intangible property, except securities and insurance or
112114 54
113115 services related thereto; or
114116 55
115117 (ii) a transaction:
116118 56
117119 (A) that is initiated or completed in this state; and
118120 57
119121 (B) that constitutes credit offered or extended by a commercial entity to a person
120122 58
121123 primarily for personal, family, or household purposes.
122124 59
123125 (b) "Consumer transaction" includes:
124126 60
125127 (i) the use of nonpublic personal information in relation to a transaction with a person
126128 61
127129 if the transaction is for primarily personal, family, or household purposes; and
128-- 2 - Enrolled Copy S.B. 150
129130 62
130131 (ii) with respect to any transaction described in Subsection (4)(a):
132+- 2 - 02-04 15:59 1st Sub. (Green) S.B. 150
131133 63
132134 (A) an offer or solicitation;
133135 64
134136 (B) an agreement;
135137 65
136138 (C) the performance of an agreement; or
137139 66
138140 (D) a charitable solicitation as defined in Section 13-11-3.
139141 67
140142 (c) "Consumer transaction" does not include a transaction related to real property.
141143 68
142144 (5)(a) "Nonpublic personal information" means information that:
143145 69
144146 (i) is not public information; and
145147 70
146148 (ii) either alone or in conjunction with public information, identifies a person in
147149 71
148150 distinction from other persons.
149151 72
150152 (b) "Nonpublic personal information" includes:
151153 73
152154 (i) a person's Social Security number;
153155 74
154156 (ii) information used to determine a person's credit worthiness including a person's:
155157 75
156158 (A) income; or
157159 76
158160 (B) employment history;
159161 77
160162 (iii) the purchasing patterns of a person; or
161163 78
162164 (iv) the personal preferences of a person.
163165 79
164166 (6)(a) "Physical office" means a location:
165167 80
166168 (i) accessible to the public during normal business hours;
167169 81
168170 (ii) staffed by one or more individuals who conduct business on behalf of the
169171 82
170172 commercial entity; and
171173 83
172174 (iii) used for the primary purpose of transacting business with consumers in the state.
173175 84
174176 (b) "Physical office" does not include a post office box, mailing address, registered
175177 85
176178 agent, or virtual office that a person solely relies on for business correspondence.
177179 86
178180 [(6)] (7) "Public information" means a person's:
179181 87
180182 (a) name;
181183 88
182184 (b) telephone number; or
183185 89
184186 (c) street address.
185187 90
186188 [(7)] (8)(a) Subject to Subsection [(7)(b)] (8)(b), "third party" means a person other than
187189 91
188190 the commercial entity that obtains nonpublic personal information.
189191 92
190192 (b) "Third party" does not include an affiliate or agent of the commercial entity that
191193 93
192194 obtains nonpublic personal information.
193195 94
194196 Section 2. Section 13-37-203 is amended to read:
195197 95
196198 13-37-203 . Liability and remedy.
197-- 3 - S.B. 150 Enrolled Copy
198199 96
199200 (1) [A ] As a person's only remedy under this chapter, a person may bring an individual
201+- 3 - 1st Sub. (Green) S.B. 150 02-04 15:59
200202 97
201203 action, not a class action or act in a representative capacity, against a commercial entity
202204 98
203205 in a [court of competent jurisdiction in this state] federal or state court with jurisdiction if:
204206 99
205207 (a) the commercial entity enters into a consumer transaction with that person;
206208 100
207209 (b) as a result of the consumer transaction described in Subsection (1)(a), the
208210 101
209211 commercial entity obtains nonpublic personal information concerning that person; and
210212 102
211213 (c) the commercial entity violates this chapter.
212214 103
213215 (2) In an action brought under Subsection (1), a commercial entity that violates this chapter
214216 104
215217 is liable to the person individually, but not to a class or to a person in a representative
216218 105
217219 capacity, who brings the action for:
218220 106
219221 (a) $500 for each time the commercial entity fails to provide the notice required by this
220222 107
221223 section in relation to the nonpublic personal information of the person who brings the
222224 108
223225 action; and
224226 109
225227 (b) court costs.
226228 110
227229 (3) An action for a violation of this chapter may only be brought in accordance with Section
228230 111
229231 78B-2-302 within one year from the day of the consumer transaction at issue.
230232 112
231233 (4) The Legislature finds that since January 1, 2004, the prohibition on bringing a class
232234 113
233235 action is a remedy provision and not merely procedural.
234236 114
235237 [(3) A person may not bring a class action under this chapter.]
236238 115
237239 Section 3. Effective Date.
238240 116
239241 This bill takes effect on May 7, 2025.
240242 - 4 -