# Utah Code § 13-61-303: Processing deidentified data or pseudonymous data

> Utah · Statutes · In force

URL: https://www.frixlaw.com/law-library/statutes/STATE_UT_T13_S13_61_303

## Section

- **Citation:** Utah Code § 13-61-303
- **Heading:** Processing deidentified data or pseudonymous data
- **Jurisdiction:** Utah
- **Kind:** Statutes
- **Status:** In force
- **Text as of:** August 14, 2026
- **Source:** Compiled text
- **Location:** Utah Code / Title 13 / Chapter 13-61 / § 13-61-303

## Text

(1) The provisions of this chapter do not require a controller or processor to: (a) reidentify deidentified data or pseudonymous data; (b) maintain data in identifiable form or obtain, retain, or access any data or technology for the purpose of allowing the controller or processor to associate a consumer request with personal data; or (c) comply with an authenticated consumer request to exercise a right described in Subsections 13-61-202(1) through (3), if: (i) (A) the controller is not reasonably capable of associating the request with the personal data; or (B) it would be unreasonably burdensome for the controller to associate the request with the personal data; (ii) the controller does not: (A) use the personal data to recognize or respond to the consumer who is the subject of the personal data; or (B) associate the personal data with other personal data about the consumer; and (iii) the controller does not sell or otherwise disclose the personal data to any third party other than a processor, except as otherwise permitted in this section. (2) The rights described in Subsections 13-61-201(1) through (3) do not apply to pseudonymous data if a controller demonstrates that any information necessary to identify a consumer is kept: (a) separately; and (b) subject to appropriate technical and organizational measures to ensure the personal data are not attributed to an identified individual or an identifiable individual. (3) A controller who uses pseudonymous data or deidentified data shall take reasonable steps to ensure the controller: (a) complies with any contractual obligations to which the pseudonymous data or deidentified data are subject; and (b) promptly addresses any breach of a contractual obligation described in Subsection (3)(a).

## Nearby sections

- [Utah Code § 13-61-101 § 13-61-101. Definitions.](https://www.frixlaw.com/law-library/statutes/STATE_UT_T13_S13_61_101.md)
- [Utah Code § 13-61-102 § 13-61-102. Applicability.](https://www.frixlaw.com/law-library/statutes/STATE_UT_T13_S13_61_102.md)
- [Utah Code § 13-61-103 § 13-61-103. Preemption -- Reference to other laws.](https://www.frixlaw.com/law-library/statutes/STATE_UT_T13_S13_61_103.md)
- [Utah Code § 13-61-201 § 13-61-201. Consumer rights -- Access -- Deletion -- Portability -- Opt out of certain processing.](https://www.frixlaw.com/law-library/statutes/STATE_UT_T13_S13_61_201.md)
- [Utah Code § 13-61-202 § 13-61-202. Exercising consumer rights.](https://www.frixlaw.com/law-library/statutes/STATE_UT_T13_S13_61_202.md)
- [Utah Code § 13-61-203 § 13-61-203. Controller's response to requests.](https://www.frixlaw.com/law-library/statutes/STATE_UT_T13_S13_61_203.md)
- [Utah Code § 13-61-301 § 13-61-301. Responsibility according to role.](https://www.frixlaw.com/law-library/statutes/STATE_UT_T13_S13_61_301.md)
- [Utah Code § 13-61-302 § 13-61-302. Responsibilities of controllers -- Transparency -- Purpose specification and data minimization -- Consent for secondary use -- Security -- Nondiscrimination -- Nonretaliation -- Nonwaiver of consumer rights.](https://www.frixlaw.com/law-library/statutes/STATE_UT_T13_S13_61_302.md)
- [Utah Code § 13-61-303 § 13-61-303. Processing deidentified data or pseudonymous data.](https://www.frixlaw.com/law-library/statutes/STATE_UT_T13_S13_61_303.md)
- [Utah Code § 13-61-304 § 13-61-304. Limitations.](https://www.frixlaw.com/law-library/statutes/STATE_UT_T13_S13_61_304.md)
- [Utah Code § 13-61-305 § 13-61-305. No private cause of action.](https://www.frixlaw.com/law-library/statutes/STATE_UT_T13_S13_61_305.md)
- [Utah Code § 13-61-401 § 13-61-401. Investigative powers of division.](https://www.frixlaw.com/law-library/statutes/STATE_UT_T13_S13_61_401.md)
- [Utah Code § 13-61-402 § 13-61-402. Enforcement powers of the attorney general.](https://www.frixlaw.com/law-library/statutes/STATE_UT_T13_S13_61_402.md)
- [Utah Code § 13-61-403 § 13-61-403. Consumer Privacy Restricted Account.](https://www.frixlaw.com/law-library/statutes/STATE_UT_T13_S13_61_403.md)

---

Source: Frix Law Library, https://www.frixlaw.com/law-library/statutes/STATE_UT_T13_S13_61_303. Check the current official text before relying on it. Not legal advice.