Utah Health Privacy Rights

No notable expansions. Utah's laws align closely with HIPAA. The Utah Health Information Technology Act primarily addresses electronic exchange but allows patients to opt out of the state's clinical health information exchange (cHIE). So, Utah patients can prevent their providers from sharing data in the HIE by opting out via a form. Otherwise, patient rights to access (30 days), amendment, consent, etc., follow federal law. Utah's recently passed Consumer Privacy Act (2022) excludes HIPAA data, so rights like opting out of sale under that act don't apply to PHI held by covered entities.