Camera-related state law

The governing audio statute is Utah Code 77-23a-4, which makes interception of wire, oral, or electronic communications a felony unless a party to the communication consents. Utah is a one-party consent state for audio recording.

Video-only surveillance of common areas with posted notice is generally lawful. Utah Code 76-9-702 and 76-9-702.1 reach voyeurism and unlawful recording in private places. Posted notice at the entrance is the industry standard.

Alarm system licensing (DOPL)

The Utah Division of Occupational and Professional Licensing administers alarm system company licensing under Utah Code Title 58 Chapter 55a (Alarm System Security and Licensing Act) and Utah Admin. Code R156-55a. Alarm businesses, qualifiers, and alarm system company agents must be licensed. Buyers can verify a license at dopl.utah.gov.

Biometric data and the UCPA

The Utah Consumer Privacy Act (Utah Code 13-61) took effect December 31, 2023. UCPA applies to controllers conducting business in Utah or producing products targeted to Utah residents that meet defined thresholds (annual revenue over $25M and either 100,000 consumers, or 25,000 consumers and 50 percent of gross revenue from sale of personal data). The Act classifies biometric data as sensitive data and requires consent before processing.

UCPA is generally less restrictive than CCPA, VCDPA, or CTDPA. Enforcement is by the Utah Attorney General; there is no private right of action.

Privacy in the workplace

Utah does not have a single workplace electronic-monitoring statute. Pure video surveillance of common work areas with posted notice is the routine pattern. Most UT employers issue a single workplace surveillance notice in the handbook covering cameras, badge access, computer monitoring, and call recording.

Cannabis surveillance

Utah operates a medical cannabis program. Production (cultivation, processing) is regulated by the Utah Department of Agriculture and Food under Utah Admin. Code R68-29. Pharmacies are regulated by the Utah Department of Health and Human Services under Utah Admin. Code R432-37. Camera coverage and retention rules are in those administrative rules. Adult-use cannabis is not legal in Utah.

Video retention requirements

  • Cannabis (medical). R68-29 and R432-37 set retention. Pull the current rules before designing the install.
  • Healthcare. HIPAA Security Rule (45 CFR Part 164) governs PHI-touching footage.
  • Retail and hospitality. PCI-DSS Requirement 9 specifies 90-day retention for the cardholder data environment.
  • Federal contractors. NDAA Section 889 controls vendor selection. Utah hosts Hill AFB, Dugway Proving Ground, and a substantial defense and aerospace contractor base.
  • Schools. FERPA reach for K-12 districts and higher education.

Default retention for UT commercial systems with no specific industry rule is 30 days.

What Tec-Tel does to comply with Utah regulations

  • Video-only on cameras unless audio is documented with one-party consent under Utah Code 77-23a-4.
  • Posted surveillance notice at every public entrance.
  • No cameras in restrooms, locker rooms, dressing rooms, or any space where privacy is reasonably expected.
  • UCPA consent and notice language coordinated with the customer's privacy team for any biometric capture at covered controllers.
  • Retention configured to the regime that governs the industry (HIPAA, PCI, R68-29, R432-37, NDAA).
  • NDAA Section 889-compliant vendor selection on federal-touching installs.
  • DOPL-licensed alarm work where the install scope triggers Title 58 Chapter 55a.

This is a buyer-facing reference, not legal advice.

Security service in Utah

Tec-Tel deploys AI-era security across Utah with one accountable project manager owning design, install, and service to one standard. The cities below have local service detail, deal sizing, and a free consultation. Don't see yours? We cover the whole state.

Or browse the full city directory and nationwide coverage map.