The Utah Office of the Attorney General released updated guidelines on what businesses and consumers should expect when the state's Protection of Personal Information Act takes effect 31 Dec. The law requires businesses to implement data security practices to protect users' confidentiality, and consumers have the right to request what data is collected on them and to opt out of personal data collection used in advertising.