AI compliance checklist

The AI compliance checklist, built from the laws themselves.

Every item below is a duty an enacted state AI law sets out, written in plain English and tied to the section of law it comes from. 1235 items from 326 laws in 50 states, grouped by state and law. Filter to your states and topics, tick items off as you go, and print it for your files.

Read from official legal texts by AI Laws by State Last checked November 15, 2026 How we verify Information, not legal advice

State Topic Clear

57 items for your choices

0 of 57 ticked. Ticks are saved in this browser only.

See it as a dated plan Download as CSV with Pro

Utah

57 items from 13 laws

Utah Abuse of Personal Identity Act, AI impersonation amendments (SB 271)

S.B. 271, 2025 General Session, effective May 7, 2025; Utah Code 45-3-2 to 45-3-5 and 45-3-7, as further amended by Chapter 489, Laws of Utah 2026 (S.B. 256). Enforced by: Private civil action by the individual whose personal identity was abused, or the right holder, against the person who caused the publication or, on the stated conditions, the publisher. No government enforcer is named in the chapter; it leaves room for criminal prosecution under Utah Code 76-12-304.. Checked November 14, 2026.

Person: Do not use content containing an individual's personal identity, including an AI-made simulation, for advertising, fundraising, soliciting donations or purchases without the individual's consent. Starts May 6, 2026 · Ongoing · Applies when: Any such use; since May 6, 2026 no endorsement or confusion element is required. A narrower version applied from May 7, 2025. · Utah Code 45-3-3(2)(a)

Person: Do not publish, perform, distribute, transmit or otherwise make available an individual's personal identity with actual knowledge that the use was not authorized. Starts May 6, 2026 · Ongoing · Applies when: Authorization comes from the living individual, a minor's legal guardian, or the right holders of an individual deceased up to 70 years. A clear and conspicuous disclosure that the content is a simulation or artificial recreation takes the use outside this rule. · Utah Code 45-3-3(2)(b), (5)

Person: Do not knowingly distribute, sell or license technology, software or a tool whose intended primary purpose is unauthorized creation or modification of content that includes an individual's personal identity. Starts May 7, 2025 · Ongoing · Applies when: Any distribution, sale or license; first added May 7, 2025 for commercial purposes and broadened May 6, 2026. · Utah Code 45-3-3(2)(c)

Person who published the advertisement or content: Take reasonable steps to ensure consent was obtained before publishing an advertisement or content whose face suggests the individual is unlikely to have consented. Starts May 7, 2025 · Ongoing · Applies when: On its face, a reasonable person would conclude the individual is unlikely to have consented to the use; a publisher that took no reasonable steps can be sued. · Utah Code 45-3-5(1)

Utah Artificial Intelligence Policy Act

Utah Code Title 13, Chapter 72 (Artificial Intelligence Policy Act), enacted by S.B. 149 (2024, Laws of Utah 2024, ch. 186) and amended by H.B. 320 (2026, ch. 127); the generative-AI disclosure duties originally at Utah Code 13-2-12 were repealed and replaced by Title 13, Chapter 75 (S.B. 226, 2025); chapter 72 repeal date July 1, 2027 (Utah Code 63I-2-213). Enforced by: Utah Division of Consumer Protection (Department of Commerce), with the Attorney General advising and representing the Division; a chapter 75 violation is a violation of Utah Code 13-11-4(1).. Checked November 11, 2026.

Supplier: If a person clearly and unambiguously asks whether they are dealing with AI, disclose that they are interacting with generative AI and not a human. When triggered · Each time it happens · Applies when: A supplier uses generative AI to interact with an individual in a consumer transaction and the individual asks or prompts about AI use. · Utah Code 13-75-103(1)

Individual providing services in a regulated occupation: Prominently disclose generative AI use in a high-risk AI interaction: verbally at the start of a verbal interaction and in writing before a written interaction begins. When triggered · Each time it happens · Applies when: Generative AI is used in a high-risk AI interaction while providing regulated-occupation services, on and after May 7, 2025. · Utah Code 13-75-103(2)(a), (3)

Any person using generative AI: Generative AI's involvement is no defense: a person remains liable under Division of Consumer Protection statutes for statements or acts made by or through generative AI. Starts May 7, 2025 · Ongoing · Applies when: Any consumer-protection violation committed with generative AI, on and after May 7, 2025. · Utah Code 13-75-102

Participant: Follow the regulatory mitigation agreement's scope limits, safeguards, consumer disclosures and reporting; cooperate with Office audits; initial demonstration period of at most 12 months, with up to two 12-month extensions. When triggered · Ongoing · Applies when: Only while admitted to the AI Learning Laboratory. · Utah Code 13-72-401(4), (6), (7); 13-72-403(1), (2), (4)

Office of Artificial Intelligence Policy: Report annually, before November 30, to the Business and Labor Interim Committee on the Learning Laboratory and regulatory mitigation and joint interpretation agreements. When triggered · Every year · Applies when: Each year while chapter 72 is in force. · Utah Code 13-72-201(3)(d)

Utah apparent child sexual abuse material law (H.B. 289, 2026)

H.B. 289, Child Sexual Abuse Material Amendments, 2026 General Session (Laws of Utah 2026, Chapter 358); enacts Utah Code 76-5b-207 to 76-5b-209; amends 76-5b-103, 76-5b-206, 76-5b-301 and related sections. Enforced by: Criminal prosecution; the Attorney General's Internet Crimes Against Children unit is assigned cases involving apparent and obscene child sexual abuse material. A web search on November 15, 2026 found no lawsuit or court order blocking this law.. Checked November 15, 2026.

Actor (any person): Do not intentionally or knowingly possess, view, or access with intent to view apparent child sexual abuse material, including AI-generated depictions of realistic minors. Starts May 6, 2026 · Ongoing · Applies when: Always; proof that a real minor exists is not required. · Utah Code 76-5b-207(2), (6)

Actor (any person): Do not intentionally distribute or produce apparent child sexual abuse material. Starts May 6, 2026 · Ongoing · Applies when: Always; proof that a real minor exists is not required. · Utah Code 76-5b-208(2), (5)

Actor (any person): Do not intentionally or knowingly produce, distribute or receive obscene child sexual abuse material, or possess it with intent to distribute. Starts May 6, 2026 · Ongoing · Applies when: Conduct that is not already an offense under Utah Code 76-5b-201 or 76-5b-201.1. · Utah Code 76-5b-209(2)

Computer technician: Immediately report to law enforcement, the NCMEC CyberTipline or an employer designee any image seen at work believed to be child sexual abuse material, including apparent or obscene material. When triggered · Each time it happens · Applies when: The technician views the image in the course of paid employment. · Utah Code 76-5b-206(2)

Employer-designated employee: Immediately forward a technician's report to a law enforcement agency. When triggered · Each time it happens · Applies when: The employer requires technicians to report to a designated employee. · Utah Code 76-5b-206(7)

Utah autonomous vehicle law (H.B. 101, 2019)

H.B. 101, Autonomous Vehicle Regulations, 2019 General Session (Laws of Utah 2019, ch. 459); enacts Utah Code 41-26-102.1 to 41-26-108; amends 13-51-102, 13-51-103, 41-1a-102, 41-1a-201, 41-1a-202, 41-1a-1503, 41-6a-102, 41-6a-1641, 53-3-102, 53-3-104, 53-3-202. Enforced by: The division named in 41-26-103(4) may revoke an ADS vehicle's registration and operating privilege when the Department of Transportation or the Department of Public Safety finds it is operating unsafely. A web search on November 15, 2026 found no court challenge to this law.. Checked November 15, 2026.

Owner: Operate a level three ADS vehicle only if it obeys traffic and safety laws, has required federal certification, and on system failure reaches a minimal risk condition or requests intervention. Starts May 14, 2019 · Ongoing · Applies when: A vehicle with a level three ADS is operated on a Utah highway; it must also be titled and registered under 41-26-107. · Utah Code 41-26-103(1)

Owner: Operate a level four or five ADS vehicle driverless only if it can obey traffic laws, has any required federal certification, and reaches a minimal risk condition on system failure. Starts May 14, 2019 · Ongoing · Applies when: Driverless operation on a Utah highway; the vehicle must also be titled and registered under 41-26-107. · Utah Code 41-26-103(2)

Owner: Before an ADS operates the vehicle on a Utah highway, ensure the vehicle complies with the Financial Responsibility of Motor Vehicle Owners and Operators Act (Title 41, Chapter 12a). Starts May 14, 2019 · Ongoing · Applies when: Any ADS-equipped vehicle operated by its ADS on a Utah highway. · Utah Code 41-26-107(3)

Owner: Register and title the ADS-equipped vehicle under Title 41, Chapter 1a. Starts May 14, 2019 · Once · Applies when: The owner is a Utah resident. · Utah Code 41-26-107(1), (2)

Owner: After a crash with the ADS engaged, keep the vehicle at the scene where 41-6a-401 requires, consistent with a minimal risk condition; report the crash under Chapter 6a, Part 4. When triggered · Each time it happens · Applies when: A crash or collision involving a vehicle with its ADS engaged. · Utah Code 41-26-105(1)

Owner: If absent at the crash, immediately make registration card contents and the insurer's name and agent phone number available to persons involved, or a peace officer on request. When triggered · Each time it happens · Applies when: A crash with the ADS engaged when neither the owner nor someone acting for the owner is in the vehicle. · Utah Code 41-26-105(2)

On-demand autonomous vehicle network: Operate only under the state laws for for-hire ground transportation, such as the Transportation Network Company Registration Act, public transit district or private passenger carrier laws. Starts May 14, 2019 · Ongoing · Applies when: A network dispatching level four or five ADS vehicles in driverless operation. · Utah Code 41-26-106(1)

Utah counterfeit intimate image law, generated-image definition (S.B. 66, 2024)

S.B. 66, Criminal Offense Amendments, 2024 General Session; amends Utah Code 76-5b-205. Enforced by: Criminal prosecution (the section does not name the prosecutor). A web search on November 14, 2026 found no report of a court order blocking this section; court dockets were not searched.. Checked November 14, 2026.

Person: Do not knowingly distribute a counterfeit intimate image of someone without their consent when you should know it would cause a reasonable person distress or harm. Starts May 1, 2024 · Ongoing · Applies when: The image was created or provided by the actor without the depicted person's knowledge and consent. · Utah Code 76-5b-205(2)(a)

Person 18 or older: Do not distribute a counterfeit intimate image depicting a child; this is aggravated unlawful distribution. Starts May 1, 2024 · Ongoing · Applies when: The base offense is committed and the person depicted is under 18. · Utah Code 76-5b-205(2)(b)

Hosting company: Immediately remove a counterfeit intimate image on notice from law enforcement, a prosecutor or the person depicted, to keep the hosting-company exclusion. When triggered · Each time it happens · Applies when: The company stores or caches the image and receives such a notice. · Utah Code 76-5b-205(5)(b)

Utah generative AI consumer disclosure law (S.B. 226, 2025)

S.B. 226, Artificial Intelligence Consumer Protection Amendments, 2025 General Session (Laws of Utah 2025, Chapter 465); enacted as Utah Code 13-75-101 to 13-75-106 and now codified as Utah Code 13-77-101 to 13-77-106; amends 63I-2-213; repeals 13-2-12. Enforced by: Utah Division of Consumer Protection, with the attorney general as its counsel. A violation of the chapter is also a violation of Utah Code 13-11-4(1). No court order blocking the law was found.. Checked November 15, 2026.

Supplier: Disclose that the individual is interacting with generative AI and not a human when the individual clearly and unambiguously asks whether AI is being used. Starts May 7, 2025 · Each time it happens · Applies when: The supplier uses generative AI to interact with an individual in connection with a consumer transaction. · Utah Code 13-77-103(1)

Individual providing services in a regulated occupation: Prominently disclose that the person receiving services is interacting with generative AI: verbally at the start of a verbal interaction, in writing before a written one. Starts May 7, 2025 · Each time it happens · Applies when: Generative AI is used in providing regulated services and the use is a high-risk AI interaction. · Utah Code 13-77-103(2)(a), (3)

Individual providing services in a regulated occupation: Comply with all requirements of the regulated occupation when providing services through generative AI. Starts May 7, 2025 · Ongoing · Applies when: Services in a regulated occupation are provided through generative AI. · Utah Code 13-77-103(2)(b)

Utah identity protection and AI defamation law (S.B. 256, 2026)

S.B. 256, Identity Protection Modifications, 2026 General Session (Laws of Utah 2026, Chapter 489); enacts Utah Code 45-2-3.5 and 45-2-14; amends 45-3-2 to 45-3-7 (Abuse of Personal Identity Act). Enforced by: Private lawsuits by the individual or a right holder; no state agency is named. The chapter does not bar criminal prosecution under Utah Code 76-12-304. No court order blocking the law was found.. Checked November 15, 2026.

Person: Do not use content containing an individual's likeness, voice or other personal identity for advertising, fundraising, soliciting donations or promoting purchases without the individual's consent. Starts May 6, 2026 · Ongoing · Applies when: Content with an individual's personal identity, including an AI simulation or recreation, is used for a commercial or fundraising purpose; the right lasts until 70 years after death. · Utah Code 45-3-3(1), (2)(a)

Person: Do not publish, distribute, transmit or make available an individual's personal identity knowing the use was unauthorized, unless clearly and conspicuously disclosed as a simulation or artificial recreation. Starts May 6, 2026 · Ongoing · Applies when: The person has actual knowledge the use was not authorized by the living individual, a minor's guardian, or, for up to 70 years after death, the successors. · Utah Code 45-3-3(2)(b), (5)

Person: Do not knowingly distribute, sell or license technology, software or a tool whose intended primary purpose is unauthorized creation or modification of content including an individual's personal identity. Starts May 6, 2026 · Ongoing · Applies when: Any distribution, sale or licensing of such a tool on or after May 6, 2026. · Utah Code 45-3-3(2)(c)

Publisher: Take reasonable steps to ensure consent was obtained before publishing content that, on its face, a reasonable person would conclude the individual was unlikely to consent to. Starts May 6, 2026 · Each time it happens · Applies when: The publisher publishes an advertisement or content using an individual's personal identity. · Utah Code 45-3-5(1)

Utah intimate image distribution law, computer-generated images (H.B. 148, 2024)

H.B. 148, Artificial Pornographic Images Amendments, 2024 General Session; amends Utah Code 76-5b-103, 76-5b-203, 76-5b-204, 76-5b-205. Enforced by: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no court challenge to this section.. Checked November 15, 2026.

Person: Do not distribute, duplicate or copy an intimate image, including a computer-generated one, of an adult without consent when you know or should know it would cause distress or harm. Starts May 1, 2024 · Ongoing · Applies when: The image was created or provided under a reasonable expectation of privacy and the person depicted suffers actual distress or harm (not required in limited cases under (2)(b)). · Utah Code 76-5b-203(2)

Utah mental health chatbot law (HB 452)

H.B. 452, 2025 General Session (Laws of Utah 2025, Chapter 269); enacts Utah Code Title 13, Chapter 72a (13-72a-101 to 13-72a-301) and 58-60-118; amends 13-2-1. Enforced by: Utah Division of Consumer Protection.. Checked November 12, 2026.

Supplier: Do not sell or share with any third party a Utah user's individually identifiable health information or user input. Starts May 7, 2025 · Ongoing · Applies when: A supplier offers a mental health chatbot to Utah users; narrow exceptions apply to health information only. · Utah Code 13-72a-201(1), (2)

Supplier: When sharing health information needed for the chatbot to function, comply with the HIPAA privacy and security rules as if a covered entity dealing with a business associate. When triggered · Ongoing · Applies when: The supplier shares individually identifiable health information with a contractor to ensure the chatbot functions effectively. · Utah Code 13-72a-201(3)

Supplier: Do not advertise a product or service in a chatbot conversation unless the chatbot clearly identifies the advertisement and discloses any sponsorship, affiliation or promotion agreement. Starts May 7, 2025 · Ongoing · Applies when: A mental health chatbot is used to advertise a specific product or service to a Utah user. · Utah Code 13-72a-202(1)

Supplier: Do not use a Utah user's input to decide whether to show an advertisement, to choose what to advertise, or to customize how an advertisement is presented. Starts May 7, 2025 · Ongoing · Applies when: Any advertising to a Utah user, except an advertisement for the mental health chatbot itself. · Utah Code 13-72a-202(2)

Supplier: Cause the chatbot to clearly and conspicuously disclose that it is AI technology and not a human before the user may access its features. Starts May 7, 2025 · Ongoing · Applies when: A Utah user first accesses the mental health chatbot. · Utah Code 13-72a-203(1), (2)(a)

Supplier: Repeat the AI disclosure at the start of any interaction after seven days without access, and whenever the user asks whether AI is being used. When triggered · Each time it happens · Applies when: The user has not accessed the chatbot in the previous seven days, or asks or prompts the chatbot about AI use. · Utah Code 13-72a-203(2)(b), (c)

Utah sexual extortion law, counterfeit intimate images (H.B. 13, 2025)

H.B. 13, Sexual Extortion Amendments, 2025 General Session; amends Utah Code 76-5b-204. Enforced by: Criminal prosecution (the section does not name the prosecutor). A web search on November 14, 2026 found no report of a court order blocking this section; court dockets were not searched.. Checked November 14, 2026.

Person: Do not threaten to distribute an intimate or counterfeit intimate image of someone to coerce sexual contact or sexual images, or to obtain anything of value. Starts May 7, 2025 · Ongoing · Applies when: The actor acts with the intent to coerce, or knowingly causes the victim to act, or seeks a thing of value or to compel an act against the victim's will. · Utah Code 76-5b-204(2)(a)(i)(B), (2)(b), (2)(c)(i)

Person: Do not refuse, for coercion or gain, to delete an intimate or counterfeit intimate image, or remove it from an account you manage, after the victim asks. Starts May 6, 2026 · Each time it happens · Applies when: The victim, or a third party acting at the victim's direction, requests deletion or removal, and the actor has the coercive or thing-of-value intent. · Utah Code 76-5b-204(2)(a)(ii), (2)(c)(ii)

Utah social media liability for minors' excessive use of algorithmic feeds (H.B. 464, 2024)

H.B. 464, Social Media Amendments, 2024 General Session (Laws of Utah 2024, ch. 224); enacts Utah Code 78B-3-1101 to 78B-3-1106, amends 76-9-201, repeals Title 13, Chapter 63. Enforced by: Private lawsuits by a Utah minor account holder or the minor's parent or guardian; no government enforcer is named in Part 11. Court status: a September 10, 2024 federal preliminary injunction (NetChoice v. Reyes, D. Utah No. 2:23-cv-00911) covers the separate Utah Minor Protection in Social Media Act (Utah Code 13-71); a lead copy of that order does not mention H.B. 464 or Part 11, and no order blocking Part 11 was found on November 14, 2026.. Checked November 14, 2026.

Social media company: Liable to a Utah minor account holder or their parent for a diagnosed adverse mental health outcome caused by the minor's excessive use of an algorithmically curated service. Starts October 1, 2024 · Ongoing · Applies when: The company operates an algorithmically curated social media service used by a Utah minor account holder. Causation is presumed unless the company meets the 78B-3-1104 defense. · Utah Code 78B-3-1103(1)-(3)

Social media company (optional safe harbor): To use the affirmative defense: cap Utah minors at three hours per 24 hours, block access 10:30 p.m. to 6:30 a.m., require parental consent, and disable engagement-driven design elements. Starts October 1, 2024 · Ongoing · Applies when: Voluntary. A company that shows the court it does all four shifts the causation presumptions in its favor; device-level settings may be used, but the company stays responsible. · Utah Code 78B-3-1104(1)-(3); 78B-3-1103(4)

Social media company: Do not rely on terms of service, arbitration or choice-of-law clauses that waive or limit these rights; such waivers are void and unenforceable. Starts October 1, 2024 · Ongoing · Applies when: Any contract with a Utah minor account holder or parent. · Utah Code 78B-3-1105

Utah synthetic media disclosure in political communications law (S.B. 131, 2024)

S.B. 131, 2024 General Session (Laws of Utah 2024, ch. 172); enacts Utah Code 20A-11-1104 and 76-3-203.18. Enforced by: A person bringing a civil action to enforce the section against a creator or sponsor; the court may impose the civil penalty. No state agency is named. A web search on November 14, 2026 found no report of a court order blocking this law; court dockets were not searched.. Checked November 14, 2026.

Payer of a political audio communication: Include the audible words "Contains content generated by AI" at the beginning and at the end of the communication. Starts May 1, 2024 · Each time it happens · Applies when: A covered audio communication contains synthetic audio media. · Utah Code 20A-11-1104(3)

Payer of a political visual communication: Display the matching AI-generated notice in legible writing throughout each portion of the communication that contains synthetic media. Starts May 1, 2024 · Each time it happens · Applies when: A covered visual communication contains synthetic media. The words vary by content: "This video content generated by AI", "This image generated by AI", "This audio content generated by AI" or "This content generated by AI". · Utah Code 20A-11-1104(4)

Creator or sponsor: Ensure an online political communication carries embedded tamper-evident digital content provenance disclosing its initial author and creator, later editors, and any use of generative AI. Starts May 1, 2024 · Each time it happens · Applies when: The creator or sponsor publishes online a covered digital audio or visual communication that is viewable, audible or accessible in Utah. This is in addition to the audio and visual notices. · Utah Code 20A-11-1104(5)

Also check: 16 other enacted AI laws in your state are not yet mapped duty by duty: HB0218, HB0273, HB0320, HB0450, HB193, HB238, HB249, HB366, HB444, HJR26, SB0292, SB180, SB231, SB332, SB34, SB84.

Get an email when Utah AI bills change

We’ll email you when AI bills in Utah are introduced or change status (at most one alert email a day), plus our weekly digest.

We’ll send a confirmation link first; nothing else is sent until you confirm. Unsubscribe anytime. See past weekly issues. Need alerts for specific bills only? Per-bill alerts come with Pro.

Information, not legal advice. This checklist summarizes what the official texts of the laws listed say. It does not decide whether a law applies to your organization; that turns on facts such as your size, your role as a developer or deployer, and how you use AI. Laws change, and courts and regulators can read them differently. Check the official text linked with each item and talk to a qualified lawyer before acting. Using this page does not create an attorney-client relationship. See our terms of service.

Where the items come from

Each item is one duty from an enacted law, read from the official text on the legislature’s or state’s own website. 265 of the 326 laws have also been read a second time to confirm every date, threshold, penalty and enforcer. Each item names who the duty falls on, when it starts, how often it recurs and the section it comes from, with a link.

Where a law is silent, the checklist says so rather than guessing. A law that is repealed or replaced on a known date shows that end date and drops off afterward. The list is rebuilt from these records every time the page loads.

Want the same duties ordered by start date, with penalties and enforcers side by side? Use the compliance plan builder. For AI in hiring specifically, see the AI hiring compliance checklist. To report an error, use the corrections page.

Session Expired

The AI compliance checklist, built from the laws themselves.

57 items for your choices

Utah

Get an email when Utah AI bills change

Where the items come from