Title 8

The provisions of this chapter apply to persons that conduct business in this state or persons that produce products or services that are targeted to residents of this state and that meet either of the following qualifications: (1) Control or process the personal data of more tha…

(a) Notwithstanding any other provisions of this chapter, this chapter shall not apply to any of the following: (1)a. A political subdivision of the state. b. Any board, authority, district, or public corporation organized pursuant to Title 11 or Chapter 7 of Title 39. (2) A two-…

(a) Subject to authentication and any other conditions or limitations provided by this chapter, a consumer may invoke the rights authorized pursuant to this subsection at any time by submitting a request to a controller specifying the consumer right the consumer seeks to invoke. …

(a) A parent or legal guardian of a known child or a guardian or conservator of a consumer may act on the known child’s or the consumer’s behalf to opt out of the processing of the known child’s or the consumer’s personal data for one or more of the purposes specified in Section …

(a) A controller shall do all of the following: (1) Limit the collection of personal data to what is adequate, relevant, and reasonably necessary in relation to the purposes for which the personal data is processed. (2) Establish, implement, and maintain reasonable administrative…

(a) A processor shall adhere to the instructions of a controller and shall assist the controller in meeting the controller’s obligations under this chapter, considering the nature of processing and the information available to the processor, including, but not limited to, both of…

(a) Any controller in possession of deidentified data shall do all of the following: (1) Take measures to ensure that the deidentified data cannot reasonably be associated with an individual. (2) Refrain from reidentifying the deidentified data when maintaining and using deidenti…