Utah
Information is updated monthly and is only shown for states with defined laws.
Which states have AI laws in effect today? This tracker summarizes key AI laws that may impact your business. Subscribe for updates.
| State/Terr | AI Scope | Relevant Law | Law Link | Effective Date | Key Requirements | Enforcements & Penalties |
|---|---|---|---|---|---|---|
| Utah | AI Healthcare | AI Applications Related to Mental Health | Utah Code § 13-72a-101 | 5/7/2025 | • Prohibits the supplier of a mental health chatbot from: - Selling or sharing with any third party any individually identifiable health information of a Utah user or user input of a Utah user (with narrow exception). - Using a Utah user's input to facilitate targeted advertising. - Advertising a specific product or service to a Utah user in a conversation unless an appropriate disclaimer is provided identifying the relevant advertisement and any agreement / sponsorship to promote it. • Requires a mental health chatbot to clearly and conspicuously disclose that it is an AI technology (and not a human) to users before they begin to use the chatbot, upon commencement of any chatbot session (if the user has not accessed the chatbot within the previous 7 days), and whenever a user asks whether they are interacting with AI. | Fines of up to $2,500 per violation of the law, or $5,000 per violation of an order issued for a violation of the law. |
| Utah | AI Liability | Artificial Intelligence Consumer Protection Amendments | Utah Code § 13-75-102 | 5/7/2025 | • Clarifies that it is not a defense to a violation of Utah's consumer protection law that generative AI made the violative statement, undertook the violative act, or was used in furtherance of the violation. | Existing penalties apply. |
| Utah | User-Facing AI | Artificial Intelligence Consumer Protection Amendments | Utah Code § 13-75-101 to 106 | 5/7/2025 | • Requires any supplier that uses generative AI to interact with individuals in connection with a consumer transaction to disclose if asked that they are interacting with generative AI and not a human being. • Requires any person providing services in a regulated occupation to prominently disclose when an individual is interacting with generative AI in the provision of regulated services if the use constitutes a high-risk artificial intelligence interaction. • Provides a safe harbor from liability where providing an appropriate disclosure about the use of generative AI proactively. • Makes users of generative AI generally responsible for the impact of the use of the technology by clarifying it is not a defense to the violation of certain laws that generative AI made the violative statement, undertook the violative act, or was used in furtherance of the violation. | Fines of up to $2,500 per violation of the law, or $5,000 per violation of an order issued for a violation of the law. |
| Utah | AI CSAM | Artificial Pornographic Images Amendments | HB 148 | 5/1/2024 | • Amends the definitions of CSAM to include “computer generated” content. | Existing penalties apply. |
| Utah | AI Intimate Images | Artificial Pornographic Images Amendments | HB 148 | 5/1/2024 | • Amends the definitions of intimate image and counterfeit intimate images to include “computer generated” content. | Existing penalties apply. |
| Utah | AI in Education | Classroom Technology Amendments | HB273 | 7/1/2026 | • Requires the Utah State Board of Education to include artificial intelligence education in its core educational standards and to create a model policy on the use of artificial intelligence in the classroom. • Requires local education agencies (LEAs) to adopt an artificial intelligence policy based on the state’s model policy. | • The state may withhold digital literacy, computer science, and educational technology program funding if an LEA has not adopted adequate artificial intelligence policies. |
| Utah | AI Transparency | Digital Content Provenance Standards Act | HB276 | 1/1/2027 | • $2,500-$5,000 per violation • Injunctive relief |
|
| Utah | AI Intimate Images | Digital Voyeurism Prevention Act | HB 276 | 1/1/2027 | • Establishes that the distribution of a counterfeit intimate image by a person that operates, maintains, or provides an interactive computer service that enables users to generate images and distributes those generated images to users through the service ("generation services") without the consent of the identifiable individual depicted in the image is a violation of the individual's reasonable expectation of privacy. • Requires generation services to take reasonable measures to inform users that distribution of non-consensual counterfeit intimate images is prohibited, violations of the law may result in civil liability, and the service provides procedures for reporting violations (along with instructions for reporting violations). • Creates a safe harbor where the generation service demonstrates that: - The generation service does not hold itself out as providing services for creating counterfeit intimate images; - The generation service has implemented and maintains a written policy that prohibits generation and distribution of non-consensual counterfeit intimate images, includes reasonable safeguards designed to prevent the creation of counterfeit intimate images, and included procedures for responding to reports of violations; - The generation service has published the policy in a clear and conspicuous location accessible to the public not he generation service's website or primary user interface; - The generation service published a general description of the safeguards implemented; - The generation service implemented and maintained a sufficient consent system; and - The generation service followed its policy in relation to the alleged violation and upon receiving notice that a counterfeit intimate image was created or distributed without consent, took prompt action to prevent further distribution. • Requires websites and other online services that serve the public and primarily provide a forum for user-generated content or publish, curate, host, or make available content of nonconsensual intimate visual depictions ("covered providers") to not knowingly allow the distribution of a counterfeit intimate image without consent from the identifiable individual depicted in the counterfeit intimate image and establish and implement notice and removal procedures aligned with the Take It Down Act. A similar safe harbor as outlined above is available to covered providers. . | • Private right of action to seek injunction, actual damages (including damages for emotional distress), punitive damages, and reasonable attorney fees and costs (with each distribution of a counterfeit intimate image without consent constituting a separate violation of the law). |
| Utah | AI in Social Media & Online Platforms | Digital Voyeurism Prevention Act | HB 276 | 1/1/2027 | • Establishes that the distribution of a counterfeit intimate image by a person that operates, maintains, or provides an interactive computer service that enables users to generate images and distributes those generated images to users through the service ("generation services") without the consent of the identifiable individual depicted in the image is a violation of the individual's reasonable expectation of privacy. • Requires generation services to take reasonable measures to inform users that distribution of non-consensual counterfeit intimate images is prohibited, violations of the law may result in civil liability, and the service provides procedures for reporting violations (along with instructions for reporting violations). • Creates a safe harbor where the generation service demonstrates that: - The generation service does not hold itself out as providing services for creating counterfeit intimate images; - The generation service has implemented and maintains a written policy that prohibits generation and distribution of non-consensual counterfeit intimate images, includes reasonable safeguards designed to prevent the creation of counterfeit intimate images, and included procedures for responding to reports of violations; - The generation service has published the policy in a clear and conspicuous location accessible to the public not he generation service's website or primary user interface; - The generation service published a general description of the safeguards implemented; - The generation service implemented and maintained a sufficient consent system; and - The generation service followed its policy in relation to the alleged violation and upon receiving notice that a counterfeit intimate image was created or distributed without consent, took prompt action to prevent further distribution. • Requires websites and other online services that serve the public and primarily provide a forum for user-generated content or publish, curate, host, or make available content of nonconsensual intimate visual depictions ("covered providers") to not knowingly allow the distribution of a counterfeit intimate image without consent from the identifiable individual depicted in the counterfeit intimate image and establish and implement notice and removal procedures aligned with the Take It Down Act. A similar safe harbor as outlined above is available to covered providers. . | • Private right of action to seek injunction, actual damages (including damages for emotional distress), punitive damages, and reasonable attorney fees and costs (with each distribution of a counterfeit intimate image without consent constituting a separate violation of the law). |
| Utah | AI in Government | Government Website Provenance Records | HB 276 | 1/1/2027 | • Requires the Chief Information Officer to make rules establishing standards (including provenance record standards) for digital content on a webpage of a state agency that the public can access to facilitate a transaction or obtain a service if the CIO determines there is substantial risk that fraudulent or misleading media could cause harm to a resident of the state interacting with the state agency. | N/A |
| Utah | AI in Insurance | Health Insurance Preauthorization Amendments | SB319 | 1/1/2027 | • Requires insurers to post a notice on their public websites if and when they use artificial intelligence in reviewing authorization requests. • Insurers must also disclose their use of artificial intelligence in this capacity to the Department, each health care provider in their network as well as to each enrollee. | Existing penalties for pre-authorization violations. |
| Utah | AI Liability | Identity Protection Modifications | SB 256 | 5/6/2026 | • Clarifies it is not a defense to a claim of libel or slander that the communication (i) was created through generative AI, computer animation, digital manipulation, or any other technological means, or (ii) uses simulated or recreated content rather than actual recordings of images of an individual. • Explains that before filing an action for libel or slander based on digitally created content, an individual must provide written notice to the person who published or caused the publication of the allegedly defamatory content. If the person who published or caused the publication of the digitally created content removes the content within 10 days after the day on which the person receives notice, the individual may recover only actual damages. | Pre-existing libel and slander enforcement and penalties. |
| Utah | AI in Government | Law Enforcement Usage of Artificial Intelligence | Utah Code § 53-25-601 to 602 | 5/7/2025 | • Requires a law enforcement agency to have a policy concerning the agency's use of generative artificial intelligence. • Requires a police report or other law enforcement record to include a disclaimer if the report or record was created wholly or partially by using generative artificial intelligence as well as a certification that it has been reviewed for accuracy. | N/A |
| Utah | Automated Decision-Making | Programmable Money Amendments | SB298 | 5/5/2027 | • Prohibits issuers of programmable money from using artificial intelligence or algorithmic decision-making to deny transactions or cause them to fail based on a person’s political opinions or speech, religious beliefs or affiliation, sex, skin color, ethnicity, medical history, location, browsing or purchase history, place of residence, business sector, or any rating that considers social credit score. | • Private right of action for statutory and declaratory relief, as well as actual and punitive damages. • Possible revocation of authorization to conduct business in Utah. |
| Utah | AI CSAM | Sexually Explicit Minor Amendments | HB 238 | 5/1/2024 | • Updates the definition of child sexual abuse material to include “artificially generated and depicts an individual with substantial characteristics of a minor engaging in sexually explicit conduct.” | Existing penalties apply. |
| Utah | AI Likeness | Unauthorized Artificial Intelligence Impersonation Amendments | Utah Code § 45-3-2 et. seq. | 5/7/2025 | • Expands existing "personal identity" protections against abuse to include any simulation, reproduction, or artificial recreation of a person's identity (with some exception). • Establishes that every person has the exclusive right to use their own personal identity. This right includes a replication right, meaning only the individual may consent to the use of their likeness in a simulation, reproduction, or artificial recreation of their personal identity. An individual’s replication right is licensable but not assignable during their lifetime and does not expire until 70 years after their death. • Sets the conditions under which an individual’s “personal identity” is abused, such as when their likeness is used for advertising, fundraising, solicitation of donations, or the purchase of goods or services. Furthermore, an individual’s “personal identity” is abused if another person knowingly distributes their likeness without authorization, or distributes, sells, or licenses tools primarily intended to unlawfully create or alter content containing someone’s personal identity. • Makes it unlawful to distribute, sell, or license any technology whose intended primary purpose is the unauthorized creation or modification of content that includes an individual's personal identity for commercial purposes. | Private right of action for injunctive relief, actual damages, exemplary damages, and reasonable attorney's fees and costs. |
| Utah | AI Liability | Utah Artificial Intelligence Policy Act | Utah Code § 13-72-301 et seq. | 5/1/2024 | • Establishes a voluntary program companies can participate in to reduce the regulatory burden relating to the company’s development and testing of AI during the company’s 12-month participation in the program in exchange for abiding by certain AI-related parameters and information sharing requirements. Set to be repealed on July 1, 2027 (as amended by SB 332) | N/A |
| Utah | AI Privacy | Utah Artificial Intelligence Policy Act | SB 149 | 5/1/2024 | • Clarifies that data generated by computer algorithms or statistical models that do not contain personal data (i.e., synthetic data) is not “personal data” under the Utah Consumer Privacy Act. | N/A |
| Utah | AI in Political Advertising | Utah Information Technology Act | SB 131 | 5/1/2024 | • Requires any person who uses generative AI to create audio or visual content intended to influence an election or ballot proposition to make clear disclosures including a disclaimer indicating the content is generated by AI. | $1,000 per violation recoverable by any person bringing a claim against the relevant creator or sponsor of the political content. |
U.S. AI Law Tracker
Which states have AI laws in effect today? This tracker summarizes key AI laws that may impact your business.
Track Other Legislation
Online Safety Resource Center
A guide to the online safety, privacy and harmful content state laws and global regulatory developments that may impact your business.