utah consumer privacy act rulemaking