§ 76-12-203 — Unlawful electronic disclosure of personal identifying information.

(1) (1)(a) As used in this section, "personal identifying information" means the same as that term is defined in Section 76-6-1101.
(1)(b) Terms defined in Sections 76-1-101.5, 76-12-101, and 76-12-201 apply to this section.
(2) An actor commits unlawful electronic disclosure of personal identifying information if the actor:
(2)(a) (2)(a)(i) electronically publishes, posts, or otherwise discloses personal identifying information of another individual in a public online site or forum without the permission of the other individual; and
(2)(a)(ii) undertakes the action described in Subsection (2)(a)(i) with the intent to abuse, threaten, or disrupt the other individual's electronic communication; or
(2)(b) sends a communication by electronic mail, instant message, or other similar means, if:
(2)(b)(i) the communication references personal identifying information of another individual;
(2)(b)(ii) the actor sends the communication:
(2)(b)(ii)(A) without the individual's consent; and
(2)(b)(ii)(B) with the intent to cause a recipient of the communication to reasonably believe that the individual authorized or sent the communication; and
(2)(b)(iii) with the intent to:
(2)(b)(iii)(A) cause an individual physical, emotional, or economic injury or damage; or
(2)(b)(iii)(B) defraud an individual.
(3) (3)(a) Except as provided in Subsection (3)(b), a violation of Subsection (2) is a class B misdemeanor.
(3)(b) A second or subsequent violation of Subsection (2) is a class A misdemeanor.
(4) (4)(a) Except as provided in Subsection (4)(b), a criminal prosecution under this section does not affect an individual's right to bring a civil action for damages suffered as a result of the commission of an offense under this section.
(4)(b) This section does not create a civil cause of action based on an electronic communication made for a legitimate business purpose.

Legislative History

Enacted by Chapter 173, 2025 General Session