Utah Code § 4-41a-103

(1) Each cannabis production establishment and each medical cannabis pharmacy shall maintain an inventory control system that meets the requirements of this section. (2) A cannabis production establishment and a medical cannabis pharmacy shall ensure that the inventory control system maintained by the establishment or pharmacy: (a) tracks cannabis using a unique identifier, in real time, from the point that a cannabis plant is eight inches tall and has a root ball until the cannabis is disposed of or sold, in the form of unprocessed cannabis or a cannabis product, to an individual with a medical cannabis card; (b) maintains in real time a record of the amount of cannabis and cannabis products in the possession of the establishment or pharmacy; and (c) preserves compatibility with the state electronic verification system described in Section 26B-4-202. (3) A cannabis production establishment and a medical cannabis pharmacy shall allow the following to access the cannabis production establishment's or the medical cannabis pharmacy's inventory control system at any time: (a) the department; and (b) the Department of Health and Human Services. (4) The department may establish compatibility standards for an inventory control system by rule made in accordance with Title 63G, Chapter 3, Utah Administrative Rulemaking Act. (5) (a) The department shall make rules in accordance with Title 63G, Chapter 3, Utah Administrative Rulemaking Act, establishing requirements for aggregate or batch records regarding the planting and propagation of cannabis before being tracked in an inventory control system described in this section. (b) The department shall ensure that the rules described in Subsection (5)(a) address record-keeping for the amount of planted seed, number of cuttings taken, date and time of cutting and planting, number of plants established, and number of plants culled or dead. (6) (a) The department may provide reports from the inventory control system to a financial institution to allow them to reconcile transactions and other financial activity of cannabis production establishments, medical cannabis pharmacies, and medical cannabis couriers that use financial services that the financial institution provides. (b) A report: (i) may only include information related to financial transactions; and (ii) may not include any identifying patient information.