Utah has passed a law regulating spyware which bars companies from installing software that reports its users’ online activity, sends personal data to other companies, or pops up ads without permission.

WhenU, a company that uses spyware to target popup ads at users, is asking for an injunction because the law will impace their business model. The ban takes effect May 3.