The global standard GPP defines a way for local standards to "plug-in" into the existing mechanics defined by GPP and the GPP client side API. This document outlines the technical specification for using the GPP specifications with the IAB Privacy Multi-State Privacy Agreement legal requirements.
| Date | Version | Comments |
| December 2022 | 1.0 | Version 1.0 released |
The Utah Privacy Section consists of the components described below. Users should employ the Utah Privacy Section only if they have determined the UCPA applies to their processing of a consumer's personal data.
| Type | Value | Description |
|---|---|---|
| GPP Section ID | 11 | The Utah Section is registered as Section ID 11 under the GPP. |
| Client side API prefix | usut | The Utah Privacy Section is registered with client side API prefix "usut" in the GPP Client Side API. |
The core segment must always be present. Where terms are capitalized in the ‘description’ field they are defined terms in Utah Code 13-61-101. It consists of the following fields:
| String Component | GPP Field Type | Definition |
|---|---|---|
| Version | Int(6) | The version of this section specification used to encode the string. |
| SharingNotice | Int(2) | Notice of the Sharing of Personal Data with Third Parties
|
| SaleOptOutNotice | Int(2) | Notice of the Opportunity to Opt Out of the Sale of the Consumer's Personal Data
|
| TargetedAdvertisingOptOutNotice | Int(2) | Notice of the Opportunity to Opt Out of Processing of the Consumer's Personal Data for Targeted Advertising
|
| SensitiveDataProcessingOptOutNotice | Int(2) | Notice of the Opportunity to Opt Out of the Processing of the Consumer's Sensitive Data
|
| SaleOptOut | Int(2) | Opt-Out of the Sale of the Consumer's Personal Data
|
| TargetedAdvertisingOptOut | Int(2) | Opt-Out of Processing the Consumer's Personal Data for Targeted Advertising
|
| SensitiveDataProcessing | N-Bitfield(2,8) | Two bits for each Data Activity:
(1) Opt-Out of the Processing of the Consumer's Sensitive Data Consisting of Personal Data Revealing Racial or Ethnic Origin. (2) Opt-Out of the Processing of the Consumer's Sensitive Data Consisting of Personal Data Revealing Religious Beliefs. (3) Opt-Out of the Processing of the Consumer's Sensitive Data Consisting of Personal Data Revealing Sexual Orientation. (4) Opt-Out of the Processing of the Consumer's Sensitive Data Consisting of Personal Data Revealing Citizenship or Immigration Status. (5) Opt-Out of the Processing of the Consumer's Sensitive Data Consisting of Personal Data Revealing Medical History, Mental or Physical Health Condition, or Medical Treatment or Diagnosis by a Health Care Professional. (6) Opt-Out of the Processing of the Consumer's Sensitive Data Consisting of Genetic Data for the Purpose of Identifying a Specific Individual. (7) Opt-Out of the Processing of the Consumer's Sensitive Data Consisting of Biometric Data for the Purpose of Identifying a Specific Individual. (8) Opt-Out of the Processing of the Consumer's Sensitive Data Consisting of Specific Geolocation Data. |
| KnownChildSensitiveDataConsents | Int(2) | Consent to Process Sensitive Data from a Known Child
|
| MspaCoveredTransaction | Int(2) | Publisher or Advertiser, as applicable, is a signatory to the IAB Multistate Service Provider Agreement (MSPA), as may be amended from time to time, and declares that the transaction is a "Covered Transaction" as defined in the MSPA.
|
| MspaOptOutOptionMode | Int(2) | Publisher or Advertiser, as applicable, has enabled "Opt-Out Option Mode" for the "Covered Transaction," as such terms are defined in the MSPA.
|
| MspaServiceProviderMode | Int(2) | Publisher or Advertiser, as applicable, has enabled "Service Provider Mode" for the "Covered Transaction," as such terms are defined in the MSPA.
|