UtahAI regulation

Regulation Status

• Utah is one of the most active US states on AI regulation and was the first to enact a broad, generally applicable generative-AI consumer-protection law. The Utah Artificial Intelligence Policy Act (SB 149), signed in March 2024 and effective 1 May 2024, requires disclosure of generative-AI use in consumer interactions and regulated occupations, clarifies that using generative AI is no defense to violations of consumer-protection law, clarifies that synthetic data without personal data is not “personal data” under the Utah Consumer Privacy Act, and created the Office of Artificial Intelligence Policy and a voluntary 12-month AI Learning Laboratory regulatory-sandbox program. In 2025 the Legislature amended the Act through SB 226 (Artificial Intelligence Consumer Protection Amendments), which narrowed the disclosure triggers, and SB 332, which extended the Act's sunset from May 2025 to 1 July 2027.
• Rather than a single omnibus statute, Utah has layered numerous targeted AI laws across sessions. Its 2024 slate also covered synthetic media, including SB 131 disclosure for AI in political advertising, HB 148’s treatment of computer-generated CSAM and intimate images, and HB 238’s inclusion of artificially generated CSAM depicting individuals with substantial characteristics of minors. In 2025 Utah enacted the nation's first AI mental-health-chatbot law (HB 452, codified at Utah Code § 13-72a), added law-enforcement AI disclosure duties (SB 180), and expanded personal-identity and likeness protections against AI impersonation and deepfakes (SB 271).
• In the 2026 session Governor Spencer Cox signed a further wave of AI legislation, including the Digital Content Provenance Standards Act and Digital Voyeurism Prevention Act provisions (HB 276), classroom AI-policy requirements (HB 273), identity-protection and defamation modifications for AI-created content (SB 256), health-insurance preauthorization AI disclosure (SB 319), and a bar on AI or algorithmic discrimination by programmable-money issuers (SB 298). Several of these carry staggered effective dates running into 2027 and 2028, cementing Utah's posture as a high-volume, incrementalist AI regulator.