Answer: D - Like the Virginia Consumer Data Protection Act, the Utah Consumer Privacy Act, which goes into effect in December of 2023, applies to data controllers or processors who:
(1) Conducts business in the state or produces a product or service that is targeted to consumers who are residents of the state,
(2) has annual revenue of $25,000,000 or more
and
(1) controls or processes information for at least 100,000 consumers each year or
(2) derives over 50% of the entity’s gross revenue from the sale of personal data and controls or processes personal data of 25,000 or more consumers.
