Senate committee extends Utah Consumer Privacy Act protections to vehicles

Representative Chevrier presented House Bill 357 (first substitute with amendment) to clarify that vehicle manufacturers are subject to the Utah Consumer Privacy Act and to require clear, reasonably accessible in‑vehicle privacy notices and consumer controls. The bill extends the Consumer Privacy Act’s rights — such as notice, data category disclosure, and deletion requests — to manufacturers and sets a delayed implementation date for in‑vehicle controls for newly manufactured vehicles (targeted to 2030) to give the industry time to comply.

Committee members asked whether the law would constrain access to vehicles or features on the market; sponsors said they negotiated implementation dates with manufacturers to avoid cutting out popular models. Katie Hass of the Division of Consumer Protection (attorney general enforces UCPA) explained consumers already have rights to request information and deletion under the UCPA and this bill would make those rights explicit for vehicle data. Industry witnesses (Alliance for Automotive Innovation, Uber) praised the sponsor's collaboration and negotiated amendments.

The committee adopted Amendment #1 (technical clarifications) and voted unanimously to report HB357 (substitute 1, as amended) favorably to the floor.

Next steps: The bill goes to the Senate floor; stakeholders indicated continued engagement on implementation timing and technical definitions.