HB 425 restricts how Utah cities and towns can charge certain fees. It bars cities from imposing general fees for broadband internet or public safety services (like police/fire) on the public, with limited exceptions (e.g., fees for bonds issued before 2026 must end by 2027). Similarly, towns cannot charge general fees for public safety services, except for existing fees tied to agreements between towns or volunteer services, which must be renewed every three years. The bill also creates a new process for municipalities to establish transportation utility fees (for services like roads), requiring annual reviews, appeal mechanisms, and local referendums for new fees.
SB 290 strengthens privacy protections for victims and witnesses in Utah criminal cases by regulating access to their nonpublic electronic data, such as personal messages or intimate images shared with law enforcement. It requires law enforcement to implement secure "virtual rooms" for defendants' attorneys to review sensitive data without copying it, creates a presumption against disclosing intimate images, and mandates clear disclosure of devices used in investigations. The bill directly affects victims/witnesses (who gain greater control over their private information), law enforcement (who must adopt new policies), and defendants (who must seek court approval to access nonpublic data). Key provisions include defining "nonpublic victim or witness data," requiring prosecutors to notify defendants about device searches, and limiting data sharing to specific court-approved scenarios. The bill makes no changes to existing evidence disclosure rules under Utah Rules of Criminal Procedure.
SB 292 amends Utah's product liability laws specifically for automated driving systems (ADS), directly affecting manufacturers and developers of level 3-5 autonomous vehicles. It limits noneconomic damages in related lawsuits, creates a legal defense for companies meeting "state-of-the-art" technology standards, and restricts liability to certain claims. The bill also establishes new definitions for ADS levels and requires a sunset review of these liability provisions. These changes aim to clarify legal responsibilities as autonomous vehicle technology advances, without altering federal safety standards.
HB 474 updates Utah's Uniform Commercial Code to modernize rules for digital transactions. It replaces "writing" with "record" to include electronic documents and creates new rules for controlling digital assets like bank accounts, electronic titles, and payment intangibles. The bill clarifies when a secured party (e.g., a bank or lender) has control over electronic records, affecting how security interests attach and are enforced in digital transactions. Businesses, financial institutions, and individuals using electronic contracts or digital assets in Utah will directly experience these changes, as the bill aligns Utah's commercial law with current electronic commerce practices.
HB 408 requires social media platforms to let users transfer portions of their personal data - including connections, content, and interactions - to other platforms within five business days. It mandates real-time data sharing when users switch services, requires explicit user consent before sharing comments or interactions during transfers, and protects platforms from penalties for temporary technical issues if they make good-faith fixes. The bill clarifies that platforms must provide data in a portable, usable format but exempts them from sharing internal algorithms, derived data, or proprietary formats that lack industry standards. This directly affects Utah social media users and platforms operating in the state, focusing on user control over their digital data.
SB 183 prohibits law enforcement officers or their agents from tampering with, repositioning, or disabling privately or commercially owned surveillance cameras without specific authorization. The law allows exceptions when the camera owner consents, a court issues a warrant beforehand, or during urgent emergencies - requiring officers to notify owners within 24 hours or obtain a court order as soon as possible after the emergency ends. This directly affects camera owners (including businesses and residents) and law enforcement agencies operating in Utah. The bill creates two new Utah Code sections (53-25-1201 and 53-25-1202) and excludes trail cameras from its provisions. It takes effect on May 6, 2026.
SB 296 requires Utah schools and colleges to obtain clear, informed consent from students before sharing their educational data (like transcripts, enrollment records, and course history). It mandates a secure digital consent system by July 2027, prohibits bundling unrelated terms with consent requests, and ensures students can revoke consent anytime. The bill directly affects students (including minors, where parents must consent) and educational institutions, while prohibiting schools from restricting consent rights or requiring waivers of unrelated privacy protections. It aligns with federal FERPA law but adds Utah-specific rules for data disclosure, including creating a private right of action if third parties violate these requirements.
HB 450 amends Utah's Government Data Privacy Act and Government Records Access and Management Act to strengthen state data privacy oversight. It restructures the Utah Privacy Commission to include state agencies, cities, counties, and education representatives, transfers oversight to a new Utah Office of Data Privacy, and creates a data privacy ombudsman to handle complaints. The bill requires joint studies on government use of passive data collection technology and removes duplicative rules while expanding correction procedures beyond personal data. These changes directly affect Utah state and local government entities that collect or manage public data.
SB 73 requires online platforms providing content deemed harmful to minors to implement age verification systems. It imposes an excise tax on these platforms, with revenues funding mental health programs and enforcement through the Division of Consumer Protection. The bill creates two dedicated accounts for these funds and grants the Division authority to investigate violations, impose fines, and establish verification standards. Platforms failing to comply face civil penalties, while approved verification methods receive a safe harbor from liability.
HB 357 updates Utah's privacy law to cover data collected by motor vehicles. It requires car manufacturers to add privacy controls in vehicles, exempts safety data (like speed or braking) from needing driver consent, and mandates the Motor Vehicle Division to inform drivers about their privacy rights. The law directly affects car manufacturers and applies to personal data collected from drivers through their vehicles. This creates new transparency requirements for vehicle data while allowing safety-related information to be used without explicit permission.
