WeVote

Bill

Bill

SB 123

Privacy and Cybersecurity Amendments

2026 General Session Introduced by Wayne Harper and 1 co-sponsor

SB 123 revises Utah privacy and cybersecurity standards, requiring fiscal analysis to assess implementation costs and regulatory compliance burden on educational institutions and covered entities.

Senate/ enrolled bill to Printing
0
WeVote Research Nonpartisan
Bill Summary · SB 123

Legislative bill overview

SB 123 amends Utah's privacy and cybersecurity laws, though the specific provisions are not detailed in the available legislative actions. The bill has undergone a substitute recommendation from the Senate Education Committee, indicating substantive revisions to the original proposal. It is currently undergoing fiscal analysis to determine budgetary impacts.

Why is this important

Privacy and cybersecurity legislation directly affects how organizations—particularly educational institutions given the committee assignment—handle sensitive personal data and protect against digital threats. The fiscal analysis phase suggests the bill may require funding for implementation, compliance infrastructure, or new regulatory oversight mechanisms that will have budget implications for the state.

Potential points of contention

  • Scope and applicability: Unclear whether privacy requirements apply broadly to all entities or are narrowly focused on educational institutions, which could create competitive advantages or burdens
  • Compliance costs: Businesses and agencies may face significant expenses for system upgrades, staff training, and ongoing compliance monitoring
  • Enforcement and liability: The bill's framework for enforcement (civil penalties, private rights of action, regulatory agency authority) will determine practical impact and legal exposure for covered entities

Compiled from official sources — confirm details with the bill’s official record.

Sign in to ask a question.