Utah Code Title 13. Commerce and Trade § 13-73-203. Dealer data vendors--Authorized integrators--Requirements

(1)(a) A dealer data vendor shall adopt and make available to a franchisee and authorized integrator in a standardized framework:

(b) The standardized framework described in Subsection (1)(a) shall comply with STAR standards or other generally accepted standards.

(2)(a) Except as provided in Subsection (2)(b), a dealer data vendor shall provide to an authorized integrator access to open application programming interfaces for the standardized framework described in Subsection (1) that meet the reasonable commercial or technical standard for secure data integration.

(b) If the open application interfaces described in Subsection (2)(a) do not meet the reasonable commercial or technical standard for secure data integration, a dealer data vendor may provide to an authorized integrator a similar open access integration method that:

(a) may access, use, store, or share protected dealer data or any other data from a dealer data system only to the extent allowed in the written agreement with the franchisee;

(b) shall, upon a franchisee's request, provide the franchisee with a list of all persons:

(c) shall allow a franchisee to audit the dealer data vendor's or authorized integrator's access to and use of protected dealer data.

(5)(a) If a dealer data vendor or authorized integrator receives a franchisee's notice described in Subsection (4), the dealer data vendor or authorized integrator shall ensure a secure transition of all protected dealer data to a successor dealer data vendor or successor authorized integrator.

(b) In fulfilling the dealer data vendor's or authorized integrator's duties under Subsection (5)(a), a dealer data vendor or authorized integrator shall: