WeVote

Bill

WeVote Research Nonpartisan
Bill Summary · SB 150

Legislative bill overview

SB 150 amends Utah's laws governing nonpublic personal information (NPI), likely modifying how entities collect, store, handle, or disclose sensitive personal data. The bill has completed the legislative process and was signed by the Governor on March 27, 2025, indicating it is now law.

Why is this important

Changes to NPI regulations directly affect privacy protections for Utah residents and compliance obligations for businesses, healthcare providers, financial institutions, and government agencies. Depending on the specific amendments, this could expand or limit privacy rights, alter data breach notification requirements, or adjust penalties for mishandling sensitive information.

Potential points of contention

  • Scope of protected information: Disagreement over which data categories qualify as NPI and warrant protection (e.g., biometric data, location information, online identifiers)
  • Compliance burden vs. privacy protection: Tension between implementing robust privacy safeguards and avoiding excessive regulatory costs for businesses
  • Enforcement and penalties: Debates over whether penalties for violations are sufficient deterrents or overly punitive to regulated entities

Compiled from official sources — confirm details with the bill’s official record.

Sign in to ask a question.