Cybersecurity laws and bills in Utah

Every bill in the Utah Legislature that falls inside the Cybersecurity Legislation Tracker's scope, with where each one currently stands.

12

Bills in Scope

10

Past Committee

25 March 2026

Most Recent Action

Cybersecurity laws enacted in Utah in 2026

6 Cybersecurity bills were enacted in Utah this year, the latest with a last action on 25 March 2026. Each links to the Utah Legislature's own page.

  • SB 275State-Endorsed Digital Identity Program Amendments25 March 2026
  • HB 450Data Privacy Amendments19 March 2026
  • HB 357Amendments to Motor Vehicle Data Privacy19 March 2026
  • HB 165Critical Infrastructure Amendments17 March 2026
  • SB 123Privacy and Cybersecurity Amendments17 March 2026
  • HB 19Drinking Water Utilities Amendments27 February 2026

What's In Scope

How Cybersecurity Legislation bills are selected

In scope is any bill imposing security duties on an identifiable party: incident notification to a regulator or an affected person, written information security programs and reasonable security standards, ransomware payment restrictions and disclosure, vendor and supply chain requirements, and the treatment of industrial control systems and supervisory control and data acquisition systems.

Scope is defined by a written topic profile that every bill is measured against. The profiles are drafted by a model and validated by retrieval measurement against a judged set of bills, not reviewed by an attorney. LawSignals is a research tool and does not provide legal advice.

Utah is one of Cybersecurity Legislation's jurisdictions

The tracker follows this subject everywhere it is legislated, and publishes a monthly issue on what moved across all of them.