Utah · AI compliance plan
What Utah’s AI laws require of you.
Utah has 29 enacted AI laws in our records. We have mapped 13 of them duty by duty: 57 duties in all, each with who it falls on, when it starts and the section of law it comes from. The next one starts January 1, 2027.
The plan at a glance
Pro turns this plan into a spreadsheet for audit files and a calendar of every start date. The plan on this page stays open to everyone.
Already in effect 35 duties
These duties are in force today.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| May 14, 2019 | Utah autonomous vehicle law (H.B. 101, 2019) | Owner | Operate a level three ADS vehicle only if it obeys traffic and safety laws, has required federal certification, and on system failure reaches a minimal risk condition or requests intervention.Applies when: A vehicle with a level three ADS is operated on a Utah highway; it must also be titled and registered under 41-26-107. | Ongoing | Utah Code 41-26-103(1) |
| May 14, 2019 | Utah autonomous vehicle law (H.B. 101, 2019) | Owner | Operate a level four or five ADS vehicle driverless only if it can obey traffic laws, has any required federal certification, and reaches a minimal risk condition on system failure.Applies when: Driverless operation on a Utah highway; the vehicle must also be titled and registered under 41-26-107. | Ongoing | Utah Code 41-26-103(2) |
| May 14, 2019 | Utah autonomous vehicle law (H.B. 101, 2019) | Owner | Before an ADS operates the vehicle on a Utah highway, ensure the vehicle complies with the Financial Responsibility of Motor Vehicle Owners and Operators Act (Title 41, Chapter 12a).Applies when: Any ADS-equipped vehicle operated by its ADS on a Utah highway. | Ongoing | Utah Code 41-26-107(3) |
| May 14, 2019 | Utah autonomous vehicle law (H.B. 101, 2019) | Owner | Register and title the ADS-equipped vehicle under Title 41, Chapter 1a.Applies when: The owner is a Utah resident. | Once | Utah Code 41-26-107(1), (2) |
| May 14, 2019 | Utah autonomous vehicle law (H.B. 101, 2019) | On-demand autonomous vehicle network | Operate only under the state laws for for-hire ground transportation, such as the Transportation Network Company Registration Act, public transit district or private passenger carrier laws.Applies when: A network dispatching level four or five ADS vehicles in driverless operation. | Ongoing | Utah Code 41-26-106(1) |
| May 1, 2024 | Utah counterfeit intimate image law, generated-image definition (S.B. 66, 2024) | Person | Do not knowingly distribute a counterfeit intimate image of someone without their consent when you should know it would cause a reasonable person distress or harm.Applies when: The image was created or provided by the actor without the depicted person's knowledge and consent. | Ongoing | Utah Code 76-5b-205(2)(a) |
| May 1, 2024 | Utah counterfeit intimate image law, generated-image definition (S.B. 66, 2024) | Person 18 or older | Do not distribute a counterfeit intimate image depicting a child; this is aggravated unlawful distribution.Applies when: The base offense is committed and the person depicted is under 18. | Ongoing | Utah Code 76-5b-205(2)(b) |
| May 1, 2024 | Utah intimate image distribution law, computer-generated images (H.B. 148, 2024) | Person | Do not distribute, duplicate or copy an intimate image, including a computer-generated one, of an adult without consent when you know or should know it would cause distress or harm.Applies when: The image was created or provided under a reasonable expectation of privacy and the person depicted suffers actual distress or harm (not required in limited cases under (2)(b)). | Ongoing | Utah Code 76-5b-203(2) |
| May 1, 2024 | Utah synthetic media disclosure in political communications law (S.B. 131, 2024) | Payer of a political audio communication | Include the audible words "Contains content generated by AI" at the beginning and at the end of the communication.Applies when: A covered audio communication contains synthetic audio media. | Each time it happens | Utah Code 20A-11-1104(3) |
| May 1, 2024 | Utah synthetic media disclosure in political communications law (S.B. 131, 2024) | Payer of a political visual communication | Display the matching AI-generated notice in legible writing throughout each portion of the communication that contains synthetic media.Applies when: A covered visual communication contains synthetic media. The words vary by content: "This video content generated by AI", "This image generated by AI", "This audio content generated by AI" or "This content generated by AI". | Each time it happens | Utah Code 20A-11-1104(4) |
| May 1, 2024 | Utah synthetic media disclosure in political communications law (S.B. 131, 2024) | Creator or sponsor | Ensure an online political communication carries embedded tamper-evident digital content provenance disclosing its initial author and creator, later editors, and any use of generative AI.Applies when: The creator or sponsor publishes online a covered digital audio or visual communication that is viewable, audible or accessible in Utah. This is in addition to the audio and visual notices. | Each time it happens | Utah Code 20A-11-1104(5) |
| October 1, 2024 | Utah social media liability for minors' excessive use of algorithmic feeds (H.B. 464, 2024) | Social media company | Liable to a Utah minor account holder or their parent for a diagnosed adverse mental health outcome caused by the minor's excessive use of an algorithmically curated service.Applies when: The company operates an algorithmically curated social media service used by a Utah minor account holder. Causation is presumed unless the company meets the 78B-3-1104 defense. | Ongoing | Utah Code 78B-3-1103(1)-(3) |
| October 1, 2024 | Utah social media liability for minors' excessive use of algorithmic feeds (H.B. 464, 2024) | Social media company (optional safe harbor) | To use the affirmative defense: cap Utah minors at three hours per 24 hours, block access 10:30 p.m. to 6:30 a.m., require parental consent, and disable engagement-driven design elements.Applies when: Voluntary. A company that shows the court it does all four shifts the causation presumptions in its favor; device-level settings may be used, but the company stays responsible. | Ongoing | Utah Code 78B-3-1104(1)-(3); 78B-3-1103(4) |
| October 1, 2024 | Utah social media liability for minors' excessive use of algorithmic feeds (H.B. 464, 2024) | Social media company | Do not rely on terms of service, arbitration or choice-of-law clauses that waive or limit these rights; such waivers are void and unenforceable.Applies when: Any contract with a Utah minor account holder or parent. | Ongoing | Utah Code 78B-3-1105 |
| May 7, 2025 | Utah Abuse of Personal Identity Act, AI impersonation amendments (SB 271) | Person | Do not knowingly distribute, sell or license technology, software or a tool whose intended primary purpose is unauthorized creation or modification of content that includes an individual's personal identity.Applies when: Any distribution, sale or license; first added May 7, 2025 for commercial purposes and broadened May 6, 2026. | Ongoing | Utah Code 45-3-3(2)(c) |
| May 7, 2025 | Utah Abuse of Personal Identity Act, AI impersonation amendments (SB 271) | Person who published the advertisement or content | Take reasonable steps to ensure consent was obtained before publishing an advertisement or content whose face suggests the individual is unlikely to have consented.Applies when: On its face, a reasonable person would conclude the individual is unlikely to have consented to the use; a publisher that took no reasonable steps can be sued. | Ongoing | Utah Code 45-3-5(1) |
| May 7, 2025 | Utah Artificial Intelligence Policy Act | Any person using generative AI | Generative AI's involvement is no defense: a person remains liable under Division of Consumer Protection statutes for statements or acts made by or through generative AI.Applies when: Any consumer-protection violation committed with generative AI, on and after May 7, 2025. | Ongoing | Utah Code 13-75-102 |
| May 7, 2025 | Utah generative AI consumer disclosure law (S.B. 226, 2025) | Supplier | Disclose that the individual is interacting with generative AI and not a human when the individual clearly and unambiguously asks whether AI is being used.Applies when: The supplier uses generative AI to interact with an individual in connection with a consumer transaction. | Each time it happens | Utah Code 13-77-103(1) |
| May 7, 2025 | Utah generative AI consumer disclosure law (S.B. 226, 2025) | Individual providing services in a regulated occupation | Prominently disclose that the person receiving services is interacting with generative AI: verbally at the start of a verbal interaction, in writing before a written one.Applies when: Generative AI is used in providing regulated services and the use is a high-risk AI interaction. | Each time it happens | Utah Code 13-77-103(2)(a), (3) |
| May 7, 2025 | Utah generative AI consumer disclosure law (S.B. 226, 2025) | Individual providing services in a regulated occupation | Comply with all requirements of the regulated occupation when providing services through generative AI.Applies when: Services in a regulated occupation are provided through generative AI. | Ongoing | Utah Code 13-77-103(2)(b) |
| May 7, 2025 | Utah mental health chatbot law (HB 452) | Supplier | Do not sell or share with any third party a Utah user's individually identifiable health information or user input.Applies when: A supplier offers a mental health chatbot to Utah users; narrow exceptions apply to health information only. | Ongoing | Utah Code 13-72a-201(1), (2) |
| May 7, 2025 | Utah mental health chatbot law (HB 452) | Supplier | Do not advertise a product or service in a chatbot conversation unless the chatbot clearly identifies the advertisement and discloses any sponsorship, affiliation or promotion agreement.Applies when: A mental health chatbot is used to advertise a specific product or service to a Utah user. | Ongoing | Utah Code 13-72a-202(1) |
| May 7, 2025 | Utah mental health chatbot law (HB 452) | Supplier | Do not use a Utah user's input to decide whether to show an advertisement, to choose what to advertise, or to customize how an advertisement is presented.Applies when: Any advertising to a Utah user, except an advertisement for the mental health chatbot itself. | Ongoing | Utah Code 13-72a-202(2) |
| May 7, 2025 | Utah mental health chatbot law (HB 452) | Supplier | Cause the chatbot to clearly and conspicuously disclose that it is AI technology and not a human before the user may access its features.Applies when: A Utah user first accesses the mental health chatbot. | Ongoing | Utah Code 13-72a-203(1), (2)(a) |
| May 7, 2025 | Utah sexual extortion law, counterfeit intimate images (H.B. 13, 2025) | Person | Do not threaten to distribute an intimate or counterfeit intimate image of someone to coerce sexual contact or sexual images, or to obtain anything of value.Applies when: The actor acts with the intent to coerce, or knowingly causes the victim to act, or seeks a thing of value or to compel an act against the victim's will. | Ongoing | Utah Code 76-5b-204(2)(a)(i)(B), (2)(b), (2)(c)(i) |
| May 6, 2026 | Utah Abuse of Personal Identity Act, AI impersonation amendments (SB 271) | Person | Do not use content containing an individual's personal identity, including an AI-made simulation, for advertising, fundraising, soliciting donations or purchases without the individual's consent.Applies when: Any such use; since May 6, 2026 no endorsement or confusion element is required. A narrower version applied from May 7, 2025. | Ongoing | Utah Code 45-3-3(2)(a) |
| May 6, 2026 | Utah Abuse of Personal Identity Act, AI impersonation amendments (SB 271) | Person | Do not publish, perform, distribute, transmit or otherwise make available an individual's personal identity with actual knowledge that the use was not authorized.Applies when: Authorization comes from the living individual, a minor's legal guardian, or the right holders of an individual deceased up to 70 years. A clear and conspicuous disclosure that the content is a simulation or artificial recreation takes the use outside this rule. | Ongoing | Utah Code 45-3-3(2)(b), (5) |
| May 6, 2026 | Utah apparent child sexual abuse material law (H.B. 289, 2026) | Actor (any person) | Do not intentionally or knowingly possess, view, or access with intent to view apparent child sexual abuse material, including AI-generated depictions of realistic minors.Applies when: Always; proof that a real minor exists is not required. | Ongoing | Utah Code 76-5b-207(2), (6) |
| May 6, 2026 | Utah apparent child sexual abuse material law (H.B. 289, 2026) | Actor (any person) | Do not intentionally distribute or produce apparent child sexual abuse material.Applies when: Always; proof that a real minor exists is not required. | Ongoing | Utah Code 76-5b-208(2), (5) |
| May 6, 2026 | Utah apparent child sexual abuse material law (H.B. 289, 2026) | Actor (any person) | Do not intentionally or knowingly produce, distribute or receive obscene child sexual abuse material, or possess it with intent to distribute.Applies when: Conduct that is not already an offense under Utah Code 76-5b-201 or 76-5b-201.1. | Ongoing | Utah Code 76-5b-209(2) |
| May 6, 2026 | Utah identity protection and AI defamation law (S.B. 256, 2026) | Person | Do not use content containing an individual's likeness, voice or other personal identity for advertising, fundraising, soliciting donations or promoting purchases without the individual's consent.Applies when: Content with an individual's personal identity, including an AI simulation or recreation, is used for a commercial or fundraising purpose; the right lasts until 70 years after death. | Ongoing | Utah Code 45-3-3(1), (2)(a) |
| May 6, 2026 | Utah identity protection and AI defamation law (S.B. 256, 2026) | Person | Do not publish, distribute, transmit or make available an individual's personal identity knowing the use was unauthorized, unless clearly and conspicuously disclosed as a simulation or artificial recreation.Applies when: The person has actual knowledge the use was not authorized by the living individual, a minor's guardian, or, for up to 70 years after death, the successors. | Ongoing | Utah Code 45-3-3(2)(b), (5) |
| May 6, 2026 | Utah identity protection and AI defamation law (S.B. 256, 2026) | Person | Do not knowingly distribute, sell or license technology, software or a tool whose intended primary purpose is unauthorized creation or modification of content including an individual's personal identity.Applies when: Any distribution, sale or licensing of such a tool on or after May 6, 2026. | Ongoing | Utah Code 45-3-3(2)(c) |
| May 6, 2026 | Utah identity protection and AI defamation law (S.B. 256, 2026) | Publisher | Take reasonable steps to ensure consent was obtained before publishing content that, on its face, a reasonable person would conclude the individual was unlikely to consent to.Applies when: The publisher publishes an advertisement or content using an individual's personal identity. | Each time it happens | Utah Code 45-3-5(1) |
| May 6, 2026 | Utah sexual extortion law, counterfeit intimate images (H.B. 13, 2025) | Person | Do not refuse, for coercion or gain, to delete an intimate or counterfeit intimate image, or remove it from an account you manage, after the victim asks.Applies when: The victim, or a third party acting at the victim's direction, requests deletion or removal, and the actor has the coercive or thing-of-value intent. | Each time it happens | Utah Code 76-5b-204(2)(a)(ii), (2)(c)(ii) |
Starting in the next 90 days 9 duties
Time to prepare is short for these.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| January 1, 2027 | Utah HB 276 (2026): Digital Content Provenance Standards Act and Digital Voyeurism Prevention Act | Large online platform | Detect whether compliant system provenance data is embedded in or attached to content distributed on the platform.Applies when: A platform meets the large online platform definition. | Ongoing | Utah Code 13-72c-201(1)(a) |
| January 1, 2027 | Utah HB 276 (2026): Digital Content Provenance Standards Act and Digital Voyeurism Prevention Act | Large online platform | Provide a user interface that discloses when system provenance data is available and lets users easily inspect it, by interface, download or link.Applies when: A platform meets the large online platform definition. | Ongoing | Utah Code 13-72c-201(1)(b), (c) |
| January 1, 2027 | Utah HB 276 (2026): Digital Content Provenance Standards Act and Digital Voyeurism Prevention Act | Large online platform | Do not knowingly strip compliant system provenance data or digital signatures from content received or distributed, to the extent technically feasible.Applies when: A platform meets the large online platform definition. | Ongoing | Utah Code 13-72c-201(2) |
| January 1, 2027 | Utah HB 276 (2026): Digital Content Provenance Standards Act and Digital Voyeurism Prevention Act | Covered provider | Include a latent disclosure in image, video or audio content the generative AI system creates or substantially modifies, conveying time and date and provenance signatures, consistent with industry standards.Applies when: A generative AI system with over 1,000,000 monthly visitors or users that is publicly accessible in Utah, to the extent technically feasible and reasonable; the information may be conveyed through a link to a permanent website. | Ongoing | Utah Code 13-72c-203 |
| January 1, 2027 | Utah HB 276 (2026): Digital Content Provenance Standards Act and Digital Voyeurism Prevention Act | Generation service | Do not distribute a counterfeit intimate image of an identifiable individual without first obtaining that individual's consent.Applies when: An interactive computer service lets users generate intimate images with AI and distributes the results. | Ongoing | Utah Code 13-72b-201(1), (2) |
| January 1, 2027 | Utah HB 276 (2026): Digital Content Provenance Standards Act and Digital Voyeurism Prevention Act | Generation service | Run a consent system that requires affirmative consent before distribution, verifies the consenting person's identity with reasonable accuracy, and keeps consent records for at least seven years.Applies when: A generation service distributes intimate images of identifiable individuals. | Ongoing | Utah Code 13-72b-201(3) |
| January 1, 2027 | Utah HB 276 (2026): Digital Content Provenance Standards Act and Digital Voyeurism Prevention Act | Generation service | Do not require personal information beyond what is reasonably necessary to verify identity and obtain valid consent.Applies when: A generation service operates a consent system. | Ongoing | Utah Code 13-72b-201(4) |
| January 1, 2027 | Utah HB 276 (2026): Digital Content Provenance Standards Act and Digital Voyeurism Prevention Act | Generation service | Tell users that non-consensual distribution is prohibited and may create civil liability, provide reporting procedures, and publish the written policy and a general description of safeguards.Applies when: A generation service offers image generation to users. | Ongoing | Utah Code 13-72b-205 |
| January 1, 2027 | Utah HB 276 (2026): Digital Content Provenance Standards Act and Digital Voyeurism Prevention Act | Covered platform | Establish notice and removal procedures meeting the federal Take It Down Act, with a clearly noticed reporting mechanism.Applies when: A platform is a covered platform under section 3 of the Take It Down Act. | Ongoing | Utah Code 13-72b-302(1), (2)(a), (b) |
Starting later 1 duty
Dates further out, in order.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| January 1, 2028 | Utah HB 276 (2026): Digital Content Provenance Standards Act and Digital Voyeurism Prevention Act | Capture device manufacturer | Include a latent disclosure in captured content conveying the manufacturer's name or sufficient digital signatures, and the time and date of creation or alteration.Applies when: Capture devices produced for sale in Utah on or after January 1, 2028, to the extent technically feasible and compliant with widely adopted specifications; the manufacturer may let users disable the disclosure. | Ongoing | Utah Code 13-72c-202(1)-(4) |
Triggered by an event 12 duties
These apply when something happens, such as a request, an incident or a decision about a person. Each row says what triggers it.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| When triggered | Utah Artificial Intelligence Policy Act | Supplier | If a person clearly and unambiguously asks whether they are dealing with AI, disclose that they are interacting with generative AI and not a human.Applies when: A supplier uses generative AI to interact with an individual in a consumer transaction and the individual asks or prompts about AI use. | Each time it happens | Utah Code 13-75-103(1) |
| When triggered | Utah Artificial Intelligence Policy Act | Individual providing services in a regulated occupation | Prominently disclose generative AI use in a high-risk AI interaction: verbally at the start of a verbal interaction and in writing before a written interaction begins.Applies when: Generative AI is used in a high-risk AI interaction while providing regulated-occupation services, on and after May 7, 2025. | Each time it happens | Utah Code 13-75-103(2)(a), (3) |
| When triggered | Utah Artificial Intelligence Policy Act | Participant | Follow the regulatory mitigation agreement's scope limits, safeguards, consumer disclosures and reporting; cooperate with Office audits; initial demonstration period of at most 12 months, with up to two 12-month extensions.Applies when: Only while admitted to the AI Learning Laboratory. | Ongoing | Utah Code 13-72-401(4), (6), (7); 13-72-403(1), (2), (4) |
| When triggered | Utah Artificial Intelligence Policy Act | Office of Artificial Intelligence Policy | Report annually, before November 30, to the Business and Labor Interim Committee on the Learning Laboratory and regulatory mitigation and joint interpretation agreements.Applies when: Each year while chapter 72 is in force. | Every year | Utah Code 13-72-201(3)(d) |
| When triggered | Utah HB 276 (2026): Digital Content Provenance Standards Act and Digital Voyeurism Prevention Act | Covered platform | Remove a reported counterfeit intimate image within 48 hours of a compliant notice and make reasonable efforts to find and remove identical copies.Applies when: A depicted individual gives a compliant notice of non-consensual publication. | Each time it happens | Utah Code 13-72b-302(2)(c), (d); 13-72b-301 |
| When triggered | Utah apparent child sexual abuse material law (H.B. 289, 2026) | Computer technician | Immediately report to law enforcement, the NCMEC CyberTipline or an employer designee any image seen at work believed to be child sexual abuse material, including apparent or obscene material.Applies when: The technician views the image in the course of paid employment. | Each time it happens | Utah Code 76-5b-206(2) |
| When triggered | Utah apparent child sexual abuse material law (H.B. 289, 2026) | Employer-designated employee | Immediately forward a technician's report to a law enforcement agency.Applies when: The employer requires technicians to report to a designated employee. | Each time it happens | Utah Code 76-5b-206(7) |
| When triggered | Utah autonomous vehicle law (H.B. 101, 2019) | Owner | After a crash with the ADS engaged, keep the vehicle at the scene where 41-6a-401 requires, consistent with a minimal risk condition; report the crash under Chapter 6a, Part 4.Applies when: A crash or collision involving a vehicle with its ADS engaged. | Each time it happens | Utah Code 41-26-105(1) |
| When triggered | Utah autonomous vehicle law (H.B. 101, 2019) | Owner | If absent at the crash, immediately make registration card contents and the insurer's name and agent phone number available to persons involved, or a peace officer on request.Applies when: A crash with the ADS engaged when neither the owner nor someone acting for the owner is in the vehicle. | Each time it happens | Utah Code 41-26-105(2) |
| When triggered | Utah counterfeit intimate image law, generated-image definition (S.B. 66, 2024) | Hosting company | Immediately remove a counterfeit intimate image on notice from law enforcement, a prosecutor or the person depicted, to keep the hosting-company exclusion.Applies when: The company stores or caches the image and receives such a notice. | Each time it happens | Utah Code 76-5b-205(5)(b) |
| When triggered | Utah mental health chatbot law (HB 452) | Supplier | When sharing health information needed for the chatbot to function, comply with the HIPAA privacy and security rules as if a covered entity dealing with a business associate.Applies when: The supplier shares individually identifiable health information with a contractor to ensure the chatbot functions effectively. | Ongoing | Utah Code 13-72a-201(3) |
| When triggered | Utah mental health chatbot law (HB 452) | Supplier | Repeat the AI disclosure at the start of any interaction after seven days without access, and whenever the user asks whether AI is being used.Applies when: The user has not accessed the chatbot in the previous seven days, or asks or prompts the chatbot about AI use. | Each time it happens | Utah Code 13-72a-203(2)(b), (c) |
Law by law
Who each law covers, who enforces it, the penalties, whether people can sue and what the text leaves open. Open a law to see it; every line cites its section.
Utah Abuse of Personal Identity Act, AI impersonation amendments (SB 271)
4 duties · checked November 14, 2026
S.B. 271, 2025 General Session, effective May 7, 2025; Utah Code 45-3-2 to 45-3-5 and 45-3-7, as further amended by Chapter 489, Laws of Utah 2026 (S.B. 256). Official text · Full law page
Who it covers
- Person. Any natural person, firm, partnership, association, corporation, joint venture or other business organization, and their agents or representatives, that uses, makes available, causes publication of or publishes another individual's personal identity, or supplies tools for doing so. Utah Code 45-3-2(7); 45-3-3(2)
- Person who published the advertisement or content. A person that provides the instrumentality through which an advertisement or content is communicated to another person. Utah Code 45-3-2(9); 45-3-5(1)
Enforcement
- Enforcer: Private civil action by the individual whose personal identity was abused, or the right holder, against the person who caused the publication or, on the stated conditions, the publisher. No government enforcer is named in the chapter; it leaves room for criminal prosecution under Utah Code 76-12-304.
- Penalty: Injunctive relief, damages alleged and proved, exemplary damages, and reasonable attorney fees and costs; no fixed amount, abuse of personal identity, in an action against the person who caused the publication; the court may award these to a prevailing plaintiff. Utah Code 45-3-4(2)
- Penalty: Injunctive relief, damages alleged and proved, exemplary damages, and reasonable attorney fees and costs; no fixed amount, abuse of personal identity, in an action against a publisher that did not take reasonable steps to ensure consent. Utah Code 45-3-5(2)
- Can people sue? Yes Utah Code 45-3-4(1); 45-3-5(1)
- Time to fix before enforcement: The law does not say
Exemptions
- News, public affairs or sports broadcasts, including their promotion, and accounts of public interest. Utah Code 45-3-7(1)(a)
- Representing an individual in a documentary, historical or biographical work, unless it falsely implies the individual authentically participated. Utah Code 45-3-7(1)(b)
- Works of political, public-interest or newsworthy value, including comment, criticism, parody, satire, scholarship or transformative creation; fleeting or incidental uses; and advertisements for exempt works. Utah Code 45-3-7(1)(c)-(e)
- An interactive computer service, as defined in 47 U.S.C. 230(f)(2), for content provided by another person. Utah Code 45-3-7(3)
- Lawfully obtained personal data or publicly available information used to preview, advertise or promote a product, service or subscription without expressing or implying the individual's endorsement. Utah Code 45-3-3(4)
- Content accompanied by a clear and conspicuous disclosure that it is a simulation or artificial recreation is not abuse under the making-available rule in 45-3-3(2)(b). Utah Code 45-3-3(5)
What the text leaves open
- The criminal offense in Utah Code 76-12-304 was not read, so no criminal penalty is given.
- S.B. 256 (2026) also enacted Utah Code 45-2-3.5 (artificially generated content) and 45-2-14 (notice before filing an action; effect of removal) in the neighboring chapter; those sections were not read, and Chapter 3 does not refer to them.
- The exemptions in 45-3-7(1) refer to 45-3-3 and 45-3-4 but not to the publisher action in 45-3-5.
- The chapter does not say whether the tool rule in 45-3-3(2)(c) can be enforced through 45-3-4, which is tied to causing a publication.
- No limitation period appears in the chapter.
- The Governor's signing date for S.B. 271 was not confirmed on an official page in this run.
Utah Artificial Intelligence Policy Act
5 duties · checked November 11, 2026
Utah Code Title 13, Chapter 72 (Artificial Intelligence Policy Act), enacted by S.B. 149 (2024, Laws of Utah 2024, ch. 186) and amended by H.B. 320 (2026, ch. 127); the generative-AI disclosure duties originally at Utah Code 13-2-12 were repealed and replaced by Title 13, Chapter 75 (S.B. 226, 2025); chapter 72 repeal date July 1, 2027 (Utah Code 63I-2-213). Official text · Full law page
Who it covers
- Supplier (generative AI in a consumer transaction). A supplier, as defined in the Utah Consumer Sales Practices Act (13-11-3), that uses generative AI to interact with an individual in a consumer transaction. Utah Code 13-75-101(10); 13-75-103(1)
- Individual providing services in a regulated occupation. An individual providing services in an occupation regulated by the Utah Department of Commerce that requires a license or state certification, when using generative AI in a high-risk AI interaction. Utah Code 13-75-101(8); 13-75-103(2)-(3)
- Participant (AI Learning Laboratory). A person seeking or holding a regulatory mitigation or joint interpretation agreement with the Office of Artificial Intelligence Policy; duties apply only to participants. Utah Code 13-72-101(16); 13-72-401
Enforcement
- Enforcer: Utah Division of Consumer Protection (Department of Commerce), with the Attorney General advising and representing the Division; a chapter 75 violation is a violation of Utah Code 13-11-4(1).
- Penalty: Up to $2,500 per violation (administrative fine by the Division director), violation of the chapter 75 disclosure duties. Utah Code 13-75-105(4)(a)
- Penalty: Up to $2,500 per violation (court-imposed), plus injunction and disgorgement; attorney fees, court costs and investigative fees are mandatory when the Division wins judgment or an injunction, violation of chapter 75 in an action brought by the Division. Utah Code 13-75-105(5)(e), (6)
- Penalty: Up to $5,000 per violation, violating an administrative or court order issued under chapter 75. Utah Code 13-75-105(7)(a)
- Can people sue? The law does not say Utah Code 13-75-105 (enforcement by the Division; no private action mentioned); 13-75-106 (other remedies not displaced)
- Time to fix before enforcement: The law does not say
Exemptions
- Safe harbor: no enforcement of the chapter 75 disclosure duties against a person whose generative AI clearly and conspicuously discloses, at the outset and throughout the interaction, that it is generative AI, not human, or an AI assistant. Utah Code 13-75-104
- Learning Laboratory participants may deploy AI despite a law or rule that would otherwise impede it, to the extent their regulatory mitigation agreement expressly waives it; all other law still applies. Utah Code 13-72-101(18); 13-72-401(7)
What the text leaves open
- The S.B. 149 committee-amended text numbers the chapter as Title 13, Chapter 70 ('Artificial Intelligence Act'); the codified chapter is Title 13, Chapter 72. The enrolled S.B. 149 was not opened to confirm the final numbering or the Laws of Utah 2024 chapter number (186 appears in H.B. 320's reference).
- S.B. 332 (2025) is reported to have also moved the chapter 72 repeal date; it was not opened today. S.B. 226's amendment to 63I-2-213(5) sets July 1, 2027.
- Chapter 72c (Digital Content Provenance Standards Act, 2026 ch. 352, effective January 1, 2027) is a separate Utah AI law and does not amend this one.
- Whether the Division of Consumer Protection has adopted rules naming additional high-risk interactions or safe-harbor disclosure formats was not checked.
- H.B. 438 (2026, Artificial Intelligence Amendments) did not pass: its last action on le.utah.gov is filing in the House file for bills not passed on March 6, 2026.
- Cure periods and reduced civil fines for Learning Laboratory participants are terms a regulatory mitigation agreement may contain (13-72-101(18)(b)); the statute sets no fixed cure period.
Utah HB 276 (2026): Digital Content Provenance Standards Act and Digital Voyeurism Prevention Act
11 duties · checked November 12, 2026
H.B. 276, 2026 General Session (Laws of Utah 2026, Chapter 352); enacts Utah Code Title 13, Chapter 72b (13-72b-101 to 13-72b-401) and Chapter 72c (13-72c-101 to 13-72c-301) and 63A-16-215; amends 13-2-1. Official text · Full law page
Who it covers
- Large online platform. A public-facing social media platform, mass messaging platform or stand-alone search engine that distributes content to users who did not create it. Threshold: More than 2,000,000 unique monthly users during the preceding 12 months Utah Code 13-72c-101(8)
- Covered provider. A person that creates or produces a generative AI system that is publicly accessible in Utah. Threshold: Over 1,000,000 monthly visitors or users Utah Code 13-72c-101(5)
- Capture device manufacturer. A person that produces a capture device (a device that records photos, audio or video) for sale in Utah. Utah Code 13-72c-101(2), (3)
- Generation service. A provider of an interactive computer service that lets users generate intimate images, processes requests on servers it controls and distributes the results to users. Utah Code 13-72b-101(7)
- Covered platform. A covered platform as defined in section 3 of the federal Take It Down Act. Utah Code 13-72b-101(4)
Enforcement
- Enforcer: Utah Division of Consumer Protection for Chapter 72c; the attorney general may sue on the division's behalf to collect a civil penalty. Chapter 72b is enforced by private lawsuits only.
- Penalty: Up to $2,500 per violation, administrative fine by the division director, or a court fine in a division action, for violating Chapter 72c; the court may also order an injunction and disgorgement. Utah Code 13-72c-301(2)(a), (3)
- Penalty: Up to $5,000 per violation, violating an administrative or court order issued under Chapter 72c. Utah Code 13-72c-301(5)
- Penalty: Actual damages including emotional distress, punitive damages for willful, reckless or malicious violations, and attorney fees and costs (no dollar amount stated), private action against a generation service or covered platform under Chapter 72b; each non-consensual distribution or each failure to take down after notice is a separate violation. Utah Code 13-72b-202; 13-72b-303
- Can people sue? Yes Utah Code 13-72b-202(1); 13-72b-303(1) (injured person or heirs may sue under Chapter 72b; Chapter 72c is silent and is enforced by the division)
- Time to fix before enforcement: The law does not say
Exemptions
- A generative AI system used only for the person's internal business operations and not made publicly accessible is not a covered provider's system. Utah Code 13-72c-101(5)
- Broadband internet access services and telecommunications services are not large online platforms. Utah Code 13-72c-101(8)
- A person exclusively engaged in the assembly of a capture device is not a capture device manufacturer. Utah Code 13-72c-101(3)
- Chapter 72b does not expand the Take It Down Act's notice and takedown requirements and does not alter or limit 47 U.S.C. 230. Utah Code 13-72b-306
What the text leaves open
- Section 13-72c-203(1)(b)(i) lets an AI provider's disclosure convey the name of the capture device manufacturer, wording that does not obviously fit AI-generated content; the text does not explain it.
- Chapter 72c names no standards body; 'widely adopted specifications' and 'widely accepted industry standards' are not defined.
- Section 13-72c-203 covers image, video and audio content and combinations of them; it does not cover text.
- Section 63A-16-215, also enacted by this bill, directs the state's chief information officer to make rules on digital provenance records for state agency websites and applications; it places no duty on private companies and is not itemized here.
- The signing date and any 2026 special-session change were not confirmed from an official page.
- Chapter 72c contains no rulemaking provision; the Division of Consumer Protection's general powers under Title 13, Chapter 2 were not read.
Utah apparent child sexual abuse material law (H.B. 289, 2026)
5 duties · checked November 15, 2026
H.B. 289, Child Sexual Abuse Material Amendments, 2026 General Session (Laws of Utah 2026, Chapter 358); enacts Utah Code 76-5b-207 to 76-5b-209; amends 76-5b-103, 76-5b-206, 76-5b-301 and related sections. Official text · Full law page
Who it covers
- Actor (any person). Anyone who possesses, views, distributes or produces apparent child sexual abuse material, or deals in obscene child sexual abuse material; a lower felony applies to actors under 18 for distribution or production. Utah Code 76-5b-207(2); 76-5b-208(2), (3); 76-5b-209(2)
- Computer technician. A person who, in paid employment, installs, maintains, troubleshoots, upgrades or repairs computer hardware, software, networks or peripherals. Utah Code 76-5b-206(1)(a)
- Employer of computer technicians. An employer that chooses to have technicians report to a designated employee. Utah Code 76-5b-206(7)
Enforcement
- Enforcer: Criminal prosecution; the Attorney General's Internet Crimes Against Children unit is assigned cases involving apparent and obscene child sexual abuse material. A web search on November 15, 2026 found no lawsuit or court order blocking this law.
- Penalty: Second degree felony (each minor and each depiction is a separate offense), possessing or viewing apparent child sexual abuse material. Utah Code 76-5b-207(3), (4)
- Penalty: First degree felony; second degree felony if the actor is under 18, distributing or producing apparent child sexual abuse material. Utah Code 76-5b-208(3)
- Penalty: Second degree felony, unlawful activity regarding obscene child sexual abuse material. Utah Code 76-5b-209(3)
- Penalty: Class B misdemeanor, a computer technician's willful failure to report. Utah Code 76-5b-206(3)
- Can people sue? The law does not say Utah Code 76-5b-206 to 76-5b-209 (criminal sections; no civil action provision)
- Time to fix before enforcement: The law does not say
Exemptions
- Entities and their staff acting in good faith on legally required reporting or data-preservation duties, or on policies to prevent, detect or report the material; also police, court staff, jurors, attorneys, DHHS and Children's Justice Center staff in their roles. Utah Code 76-5b-207(7); 76-5b-208(6)
- Internet, electronic communications, telecommunications, mobile and cable providers that report under 18 U.S.C. 2258A are outside the computer technician reporting section. Utah Code 76-5b-206(8)
What the text leaves open
- Fine and prison ranges for first and second degree felonies and class B misdemeanors are set in other Utah Code sections that were not read.
- Utah Code 20A-11-1104 (the AI definitions this law borrows) was not read.
- Codified versions of 76-5b-103, 76-5b-206 and 76-5b-209 were not opened; those values come from the enrolled bill.
- The bill moved AI-generated images out of the child sexual abuse material definition used by older offenses; how that affects pending or older charges is not addressed here.
Utah autonomous vehicle law (H.B. 101, 2019)
7 duties · checked November 15, 2026
H.B. 101, Autonomous Vehicle Regulations, 2019 General Session (Laws of Utah 2019, ch. 459); enacts Utah Code 41-26-102.1 to 41-26-108; amends 13-51-102, 13-51-103, 41-1a-102, 41-1a-201, 41-1a-202, 41-1a-1503, 41-6a-102, 41-6a-1641, 53-3-102, 53-3-104, 53-3-202. Official text · Full law page
Who it covers
- Owner. The owner of a motor vehicle equipped with a level three, four or five automated driving system (ADS) operated on a Utah highway; registration and title duties apply when the owner is a Utah resident. Utah Code 41-26-105, 41-26-107
- On-demand autonomous vehicle network. A service that uses an app or other digital means to dispatch or arrange transportation in level four or five ADS vehicles in driverless operation. Utah Code 41-26-102.1(23); 41-26-106
Enforcement
- Enforcer: The division named in 41-26-103(4) may revoke an ADS vehicle's registration and operating privilege when the Department of Transportation or the Department of Public Safety finds it is operating unsafely. A web search on November 15, 2026 found no court challenge to this law.
- Penalty: Infraction; fine amount not stated in the act, operating a vehicle, or engaging an ADS or letting another engage one, when the vehicle is not registered (as enacted in 2019). Utah Code 41-1a-201(1), (2), as amended by H.B. 101 § 4
- Penalty: Revocation of registration and the vehicle's operating privilege, the ADS is found to be operating, or being engaged, unsafely. Utah Code 41-26-103(4)
- Can people sue? The law does not say Utah Code Title 41, Chapter 26 as enacted by H.B. 101 (no civil action created; S.B. 292 of 2026 separately created a capped claim for driverless-operation injuries)
- Time to fix before enforcement: The law does not say
Exemptions
- An ADS operating a vehicle is not required to be licensed to operate it. Utah Code 41-26-104(1)(b)
- Provisions of for-hire transportation laws that reasonably apply only to a human driver do not apply to an engaged level four or five ADS in an on-demand network. Utah Code 41-26-106(2)
- The chapter does not restrict a licensed human driver from operating an ADS-equipped vehicle that has driver controls. Utah Code 41-26-103(6)
What the text leaves open
- The current version of Utah Code 41-1a-201 (registration offense) was not read; the infraction penalty is from the 2019 enrolled bill.
- Penalties for failing to report a crash or to stay at the scene are set in Title 41, Chapter 6a, Part 4, which was not read.
- The 2022 bill that became chapter 134 (amending 41-26-103) was not identified or read; only the current codified section was.
- Whether Utah Code 41-26-105, 41-26-106 and 41-26-107 have versions newer than May 14, 2019 was not confirmed beyond the absence of a superseded notice on the pages read.
- S.B. 292 (2026) caps damages and creates a no-fault claim against registered owners and dispatchers for driverless-operation injuries; it is not mapped as a duty here.
Utah counterfeit intimate image law, generated-image definition (S.B. 66, 2024)
3 duties · checked November 14, 2026
S.B. 66, Criminal Offense Amendments, 2024 General Session; amends Utah Code 76-5b-205. Official text · Full law page
Who it covers
- Actor (any person). Anyone who distributes a counterfeit intimate image; the aggravated offense applies to an actor 18 or older when the person depicted is a child. Utah Code 76-5b-205(2)(a), (b)
- Hosting company. A company whose distribution is incidental to providing data storage or caching; it keeps its exclusion only if it removes the image on notice. Utah Code 76-5b-205(5)(b)
Enforcement
- Enforcer: Criminal prosecution (the section does not name the prosecutor). A web search on November 14, 2026 found no report of a court order blocking this section; court dockets were not searched.
- Penalty: Class A misdemeanor; third degree felony for a second or later conviction not from a single criminal episode, unlawful distribution of a counterfeit intimate image. Utah Code 76-5b-205(3)(a)
- Penalty: Third degree felony; second degree felony for a second or later conviction not from a single criminal episode, aggravated unlawful distribution (person depicted is a child). Utah Code 76-5b-205(3)(b)
- Can people sue? The law does not say Utah Code 76-5b-205 (criminal section; no civil action provision)
- Time to fix before enforcement: The law does not say
Exemptions
- Lawful law enforcement, prosecution, crime reporting, court proceedings and lawful medical practice; images the person voluntarily let be publicly exposed; lawful commercial settings; matters of public concern or constitutionally protected images. Utah Code 76-5b-205(4)
- Internet, interactive computer, telecommunications, mobile and cable providers whose role is only incidental transmission or connection, that do not aid the distribution and take no above-usual fee for it. Utah Code 76-5b-205(5)(a)
- Conduct chargeable as sexual exploitation of a minor under 76-5b-201 or 76-5b-201.1 is charged there instead. Utah Code 76-5b-205(3)(c)
What the text leaves open
- Fine and jail ranges for class A misdemeanors and third and second degree felonies are set in other Utah Code sections that were not read.
- The bill that became chapter 173 of 2025 (which amended 76-5b-205) was not identified or read; the 2025 codified text was. Whether a 2026 bill amended 76-5b-205 again was not confirmed.
- Utah Code 76-5c-401 and 76-5c-402 (service-provider definitions and safe harbor) were not read.
Utah generative AI consumer disclosure law (S.B. 226, 2025)
3 duties · checked November 15, 2026
S.B. 226, Artificial Intelligence Consumer Protection Amendments, 2025 General Session (Laws of Utah 2025, Chapter 465); enacted as Utah Code 13-75-101 to 13-75-106 and now codified as Utah Code 13-77-101 to 13-77-106; amends 63I-2-213; repeals 13-2-12. Official text · Full law page
Who it covers
- Supplier. A supplier, as defined in Utah Code 13-11-3, that uses generative AI to interact with an individual in connection with a consumer transaction. Utah Code 13-77-101(10); 13-77-103(1)(a)
- Individual providing services in a regulated occupation. An individual in an occupation regulated by the Department of Commerce that requires a license or state certification, who provides services through generative AI. Utah Code 13-77-101(8); 13-77-103(2)
Enforcement
- Enforcer: Utah Division of Consumer Protection, with the attorney general as its counsel. A violation of the chapter is also a violation of Utah Code 13-11-4(1). No court order blocking the law was found.
- Penalty: Up to $2,500 for each violation, administrative fine by the division director, or a fine imposed by a court in a division action; the court may also order an injunction and disgorgement. Utah Code 13-77-105(4)(a), (5)(e)
- Penalty: Civil penalty up to $5,000 for each violation, violating an administrative or court order issued for a violation of the chapter. Utah Code 13-77-105(7)(a)
- Penalty: Reasonable attorney fees, court costs and investigative fees awarded to the division, when a court grants the division judgment or injunctive relief. Utah Code 13-77-105(6)
- Can people sue? The law does not say Utah Code 13-77-105, 13-77-106 (division enforcement; the chapter does not displace other state or federal remedies)
- Time to fix before enforcement: The law does not say
Exemptions
- Safe harbor: no enforcement action for a 13-77-103 violation if the generative AI clearly and conspicuously discloses at the outset and throughout the interaction that it is generative AI, not human, or an AI assistant. Utah Code 13-77-104(1)
- In a consumer transaction, the supplier's duty is triggered only by a clear and unambiguous request asking whether the interaction is with a human or with AI. Utah Code 13-77-103(1)(b)
What the text leaves open
- The text sets no size, revenue or user threshold.
- Whether a consumer may sue under the Utah Consumer Sales Practices Act because a violation is made a violation of 13-11-4(1) was not checked; that Act's remedy sections were not opened.
- The 2026 bill enacted as Laws of Utah 2026, Chapter 95, which amended 13-77-101 and 13-77-102, was not identified or read.
- Why the sections enacted as chapter 13-75 appear in the code as chapter 13-77 (presumably a revisor renumbering) was not confirmed.
- Whether the division has adopted rules defining other high-risk interactions or safe-harbor disclosure forms was not checked.
- The Office of Artificial Intelligence Policy is defined by reference to 13-72-201; chapter 72 has its own repeal date, and how that would affect this chapter was not examined.
- The enrolled bill shows no signing date.
Utah identity protection and AI defamation law (S.B. 256, 2026)
4 duties · checked November 15, 2026
S.B. 256, Identity Protection Modifications, 2026 General Session (Laws of Utah 2026, Chapter 489); enacts Utah Code 45-2-3.5 and 45-2-14; amends 45-3-2 to 45-3-7 (Abuse of Personal Identity Act). Official text · Full law page
Who it covers
- Person. Any person who uses, publishes, distributes, transmits or makes available content containing an individual's personal identity, or who distributes, sells or licenses tools for unauthorized creation of such content. Utah Code 45-3-3(2)
- Publisher. A person who published the advertisement or content in which an individual's personal identity was abused. Utah Code 45-3-5(1)
Enforcement
- Enforcer: Private lawsuits by the individual or a right holder; no state agency is named. The chapter does not bar criminal prosecution under Utah Code 76-12-304. No court order blocking the law was found.
- Penalty: Injunctive relief, damages alleged and proved, exemplary damages, and reasonable attorney fees and costs (court may award), abuse of personal identity, in an action against the person who caused the publication, or against a publisher that failed to take reasonable steps to ensure consent. Utah Code 45-3-4(2); 45-3-5(2)
- Can people sue? Yes Utah Code 45-3-4(1); 45-3-5(1)
- Time to fix before enforcement: The law does not say
Exemptions
- News, public affairs or sports broadcasts or accounts; documentary, historical or biographical works (unless they falsely imply authentic participation); works of political, public-interest or newsworthy value, including comment, criticism, parody and satire; fleeting or incidental uses; and ads for those works. Utah Code 45-3-7(1)
- Interactive computer services under 47 U.S.C. 230(f)(2) are not liable for content provided by another person. Utah Code 45-3-7(3); 45-2-14(5)
- Use of lawfully obtained personal data or publicly available information to preview, advertise or promote a product, service or subscription, without implying endorsement, is not abuse. Utah Code 45-3-3(4)
- Making a personal identity available is not abuse under 45-3-3(2)(b) if accompanied by a clear and conspicuous disclosure that the content is a simulation or artificial recreation. Utah Code 45-3-3(5)
What the text leaves open
- Utah Code 76-12-304 (criminal abuse of personal identity) was not opened; its offense class and penalties are not recorded here.
- The text sets no statutory damages amount and no cap on exemplary damages.
- The 10-day removal window in 45-2-14 limits damages in defamation claims; it is not stated as a cure period for Abuse of Personal Identity Act claims.
- How the retroactive post-death right in 45-3-3(1)(b)(v) applies to uses made before May 6, 2026 is not addressed in the text.
- The enrolled bill shows no signing date.
Utah intimate image distribution law, computer-generated images (H.B. 148, 2024)
1 duty · checked November 15, 2026
H.B. 148, Artificial Pornographic Images Amendments, 2024 General Session; amends Utah Code 76-5b-103, 76-5b-203, 76-5b-204, 76-5b-205. Official text · Full law page
Who it covers
- Person. Any person who distributes to a third party, duplicates or copies an intimate image, including a computer-generated image, of an individual 18 or older. Utah Code 76-5b-203(1)(a)(i), (2)(a)
Enforcement
- Enforcer: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no court challenge to this section.
- Penalty: Class A misdemeanor; fine and jail amounts not stated in the section, a first violation of 76-5b-203(2). Utah Code 76-5b-203(3)(a)
- Penalty: Third degree felony; amounts not stated in the section, a second or later conviction not arising from a single criminal episode. Utah Code 76-5b-203(3)(b)
- Can people sue? The law does not say Utah Code 76-5b-203 (criminal offense only; no civil action created)
- Time to fix before enforcement: None
Exemptions
- Lawful law enforcement and prosecutorial functions, crime reporting, court proceedings, and lawful medical practices (subject to 76-5b-203.5). Utah Code 76-5b-203(4)(a)
- Images the depicted person voluntarily allowed to be publicly exposed, images in a lawful commercial setting, and images related to a matter of public concern or interest. Utah Code 76-5b-203(4)(b)-(d)
- Internet, interactive computer, telecommunications, mobile and cable providers whose role is only incidental transmission, who do not aid the distribution and take no special fee for it. Utah Code 76-5b-203(5)(a)
- Hosting companies whose role is only incidental storage or caching, on the same conditions; a service provider that complies with 76-5c-402 is not negligent under the section. Utah Code 76-5b-203(5)(b), (c)
What the text leaves open
- When computer-generated images were first added to the 76-5b-203 definition was not checked; H.B. 148 shows that wording as existing text.
- The bills that became chapters 173 and 320 of 2025, which amended 76-5b-203, were not identified or read; only the codified result was.
- The section does not explain how the reasonable-expectation-of-privacy element applies to a wholly computer-generated image.
- Fine and jail ranges for class A misdemeanors and third degree felonies are set in Utah Code sections that were not read.
- Utah Code 76-5b-203.5 and 76-5c-402, which the exclusions refer to, were not read.
Utah mental health chatbot law (HB 452)
6 duties · checked November 12, 2026
H.B. 452, 2025 General Session (Laws of Utah 2025, Chapter 269); enacts Utah Code Title 13, Chapter 72a (13-72a-101 to 13-72a-301) and 58-60-118; amends 13-2-1. Official text · Full law page
Who it covers
- Supplier. A supplier, as defined in Utah Code 13-11-3, of a mental health chatbot used by a Utah user. Utah Code 13-72a-101(14), (16); 13-72a-201
Enforcement
- Enforcer: Utah Division of Consumer Protection.
- Penalty: Up to $2,500 per violation, administrative fine by the division director, or a court fine in a division action; the court may also order an injunction and disgorgement. Utah Code 13-72a-204(2)(a), (3)(e)
- Penalty: Up to $5,000 per violation, violating an administrative or court order issued under the chapter. Utah Code 13-72a-204(5)
- Can people sue? The law does not say Utah Code 13-72a-204 (enforcement by the division; no private action is created or denied)
- Time to fix before enforcement: The law does not say
Exemptions
- AI technology that only provides scripted output, such as guided meditations or mindfulness exercises, is not a mental health chatbot. Utah Code 13-72a-101(10)(b)(i)
- AI technology that only analyzes input to connect an individual with a human mental health therapist is not a mental health chatbot. Utah Code 13-72a-101(10)(b)(ii)
- Health information may be shared when requested by a health care provider with the user's consent, or given to the user's health plan at the user's request. Utah Code 13-72a-201(2)(a), (b)
- A chatbot may recommend that a user seek counseling, therapy or other help from a licensed professional, including a specific one. Utah Code 13-72a-202(3)
What the text leaves open
- The text sets no user-count or revenue threshold.
- The exceptions in 13-72a-201(2) and (3) cover health information only; they do not mention user input.
- Section 13-72a-204(3)(b) lets a court enjoin a violation of 'this part' while the rest of the section refers to the chapter.
- Whether S.B. 38 (2026) is the bill enacted as Chapter 95 of 2026, and exactly what it changed in 13-72a-101 and 13-72a-204, was not confirmed from the amending text.
- Whether 58-60-118 has been amended since 2025 was not checked.
- Section 58-60-118 says the policy is filed with 'the division' without defining the term in that section.
- The enrolled bill shows no signing date; the division's filing method and fee for affirmative-defense policies were not checked.
Utah sexual extortion law, counterfeit intimate images (H.B. 13, 2025)
2 duties · checked November 14, 2026
H.B. 13, Sexual Extortion Amendments, 2025 General Session; amends Utah Code 76-5b-204. Official text · Full law page
Who it covers
- Actor (any person). Any adult or child who commits sexual extortion; penalties differ for adults and children. Utah Code 76-5b-204(2), (3)
Enforcement
- Enforcer: Criminal prosecution (the section does not name the prosecutor). A web search on November 14, 2026 found no report of a court order blocking this section; court dockets were not searched.
- Penalty: Third degree felony with a mandatory fine of at least $5,000, which the court may not waive or suspend, sexual extortion by an adult. Utah Code 76-5b-204(3)(a), (4)
- Penalty: Class A misdemeanor, sexual extortion by a child. Utah Code 76-5b-204(3)(b)
- Penalty: Separate offense for each victim and each separate instance, counting offenses. Utah Code 76-5b-204(5)
- Can people sue? The law does not say Utah Code 76-5b-204 (criminal section; no civil action provision)
- Time to fix before enforcement: The law does not say
Exemptions
- An interactive computer service under 47 U.S.C. 230 is not liable under the section for content provided by a user. Utah Code 76-5b-204(7)
- Discussions of mutual deletion of intimate images received with consent, with no threat to distribute and no other exchange of value. Utah Code 76-5b-204(8)
What the text leaves open
- The bill that became chapter 330 of 2026, which rewrote 76-5b-204 (removing the aggravated sexual extortion tiers in the 2025 version and adding the refusal-to-delete prongs and $5,000 minimum fine), was not identified or read; only the codified result was.
- H.B. 13's actual effective date was not confirmed: the bill says May 7, 2025, or the governor's approval date if passed by two-thirds; the site's records list February 27, 2025.
- Jail and fine ranges for third degree felonies and class A misdemeanors are set in Utah Code sections that were not read.
Utah social media liability for minors' excessive use of algorithmic feeds (H.B. 464, 2024)
3 duties · checked November 14, 2026
H.B. 464, Social Media Amendments, 2024 General Session (Laws of Utah 2024, ch. 224); enacts Utah Code 78B-3-1101 to 78B-3-1106, amends 76-9-201, repeals Title 13, Chapter 63. Official text · Full law page
Who it covers
- Social media company. An entity that owns or operates a social media service, meaning a public website or app that mainly displays user-generated content, lets users register, build visible profiles, connect with others and post. Email, cloud storage and document collaboration services are excluded. Utah Code 78B-3-1101 (definitions of social media company and social media service)
- Social media company operating an algorithmically curated social media service. A social media service that drives engagement primarily through both a curation algorithm and engagement-driven design elements (autoplay, infinite scroll or pagination, and push notifications). Utah Code 78B-3-1101 (definitions of algorithmically curated social media service, curation algorithm, engagement driven design elements)
Enforcement
- Enforcer: Private lawsuits by a Utah minor account holder or the minor's parent or guardian; no government enforcer is named in Part 11. Court status: a September 10, 2024 federal preliminary injunction (NetChoice v. Reyes, D. Utah No. 2:23-cv-00911) covers the separate Utah Minor Protection in Social Media Act (Utah Code 13-71); a lead copy of that order does not mention H.B. 464 or Part 11, and no order blocking Part 11 was found on November 14, 2026.
- Penalty: Greater of $10,000 per adverse mental health outcome incidence or actual damages, plus reasonable attorney fees and court costs, a finding that the minor suffered an adverse mental health outcome from use of the service. Utah Code 78B-3-1103(5)
- Can people sue? Yes Utah Code 78B-3-1103(1) (Utah minor account holder or parent or guardian; plaintiff must show a licensed provider's diagnosis and causation, aided by rebuttable presumptions)
- Time to fix before enforcement: The law does not say
Exemptions
- Not a curation algorithm: responses to user-initiated searches on user-selected topics, age-appropriate content filtering, blocking violent, bullying or harassing content for minors, and curation required by laws on material harmful to minors. Utah Code 78B-3-1101 (curation algorithm definition)
- A company is not liable based on content users post, or for declining to restrict or modify posts based solely on their content. Utah Code 78B-3-1103(6)
What the text leaves open
- Utah Code 78B-3-1104 and 78B-3-1103(4) refer to 78B-11-1103 and 78B-11-1104, while the sections are codified at 78B-3; the text read does not explain this apparent numbering error.
- The codified definition of minor points to Utah Code 13-71-101, part of the Utah Minor Protection in Social Media Act that a federal court preliminarily enjoined in 2024; that section and any later changes to it were not read.
- No court ruling on Part 11 was found, but the federal court's own (.gov) copy of the NetChoice v. Reyes order was not opened; only a third-party copy was read as a lead.
Utah synthetic media disclosure in political communications law (S.B. 131, 2024)
3 duties · checked November 14, 2026
S.B. 131, 2024 General Session (Laws of Utah 2024, ch. 172); enacts Utah Code 20A-11-1104 and 76-3-203.18. Official text · Full law page
Who it covers
- Payer of a political audio or visual communication. A candidate campaign committee, political action committee, political issues committee, political party, or a person using a contribution, that pays for an audio or visual communication containing synthetic media and intended to influence voting on a Utah candidate or ballot proposition. Utah Code 20A-11-1104(2)
- Creator or sponsor. A creator is a person that uses AI to generate synthetic media; a sponsor is a person that pays for content that uses AI to generate synthetic media. Utah Code 20A-11-1104(1)(b), (e); (5); (6)(a)
Enforcement
- Enforcer: A person bringing a civil action to enforce the section against a creator or sponsor; the court may impose the civil penalty. No state agency is named. A web search on November 14, 2026 found no report of a court order blocking this law; court dockets were not searched.
- Penalty: Civil penalty of up to $1,000 for each violation, each violation of the section the court finds, in a civil action against a creator or sponsor of content that includes synthetic media. Utah Code 20A-11-1104(6)(a)
- Can people sue? Yes Utah Code 20A-11-1104(6)(a) (a civil action brought by a person to enforce the section)
- Time to fix before enforcement: The law does not say
Exemptions
- A person that solely provides the technology used to create the synthetic media is not a creator. Utah Code 20A-11-1104(1)(b)(ii)
What the text leaves open
- The live Utah Code page for 20A-11-1104 did not load for the reader; later amendments were not ruled out.
- Subsection (4)(c) applies the audio-content notice to a video that has synthetic audio but no synthetic visual media.
- The section does not say who receives the civil penalty or whether "a person" who may sue must be harmed.
- Compliance does not exempt a person from civil or criminal liability under other law (subsection (6)(b)).
Other enacted laws to check
These 16 enacted AI laws are in the states you chose, but they are not yet mapped duty by duty, so they are not in the plan above. Each page has a summary and the official source.
- Utah HB0218: Digital Skills Amendments (effective May 6, 2026)
- Utah HB0273: Classroom Technology Amendments (effective July 1, 2026)
- Utah HB0320: Office of Artificial Intelligence Policy Amendments (effective May 6, 2026)
- Utah HB0450: Data Privacy Amendments (effective May 6, 2026)
- Utah HB193: Intimate Image Distribution Prohibition (effective May 5, 2021)
- Utah HB238: Sexual Exploitation of a Minor Amendments (effective May 1, 2024)
- Utah HB249: Utah Legal Personhood Amendments (effective May 1, 2024)
- Utah HB366: Criminal Justice Amendments (effective May 1, 2024)
- Utah HB444: Data Privacy Amendments (effective March 27, 2025)
- Utah HJR26: Joint Resolution Amending Rules of Evidence to Address Machine-Generated Evidence (effective March 6, 2026)
- Utah SB0292: Autonomous Systems Amendments (effective May 6, 2026)
- Utah SB180: Law Enforcement Usage of Artificial Intelligence (effective May 7, 2025)
- Utah SB231: Public Surveillance Prohibition Amendments (effective May 1, 2024)
- Utah SB332: Artificial Intelligence Revisions (effective March 25, 2025)
- Utah SB34: Governmental Use of Facial Recognition Technology (effective May 5, 2021)
- Utah SB84: Governor's Office of Economic Opportunity Amendments (effective May 1, 2024)
How the plan is built
Each law in the plan was read from its official text, on the legislature’s or state’s own website. 265 of the 326 have also been read a second time to confirm every date, threshold, penalty and enforcer; the rest have had one full read, and each shows the date it was last checked. Each duty is written in plain English in 30 words or fewer and carries the section it comes from, with a link.
Where a law is silent, the plan says so. It does not borrow a penalty from another statute or guess at a deadline. A law that is repealed or replaced on a known date shows that end date, and its duties leave the plan once the date passes. The date each law was last checked appears with it.
The plan is built fresh from these records every time the page loads, so it changes as soon as a law is added or re-checked. To report an error, use the corrections page. For how we find laws and decide what counts as an AI law, see our methodology. If you are not sure which laws touch your business at all, start with Am I Affected?
Common questions
What does an AI compliance plan cover?
Each duty an enacted state AI law places on a business or other regulated party: who it applies to, what it requires, when it starts, how often it recurs, who enforces it, the penalties and whether people can sue. The builder covers 1,235 duties in 326 enacted laws across 50 states, and every duty links to the section of law it comes from.
Where does the information come from?
From the official text of each law: the enrolled bill, session law or codified statute, opened on the legislature's or state's own website. 265 of the 326 laws have also been read a second time to confirm every date, threshold, penalty and enforcer, and the date each law was last checked is shown with it. Where a law is silent on a point, such as a penalty amount, the plan says the law does not say rather than filling the gap. Law firm summaries and news reports are never used as sources.
Does the plan include every AI law in a state?
Not yet. It includes the enacted laws we have mapped duty by duty. When you choose a state, its other enacted AI laws are listed separately with links, so nothing is left out of view. New laws are added as they are read. When a law is repealed or replaced on a set date, its duties show that end date and leave the plan once it passes.
How do I know which duties apply to my company?
Start with the 'who it covers' entry for each law: many apply only above a size or revenue threshold, only to developers or only to deployers, or only in one industry. The plan quotes those conditions from the text. Whether your company meets them depends on facts only you and your counsel know.
Is this legal advice?
No. It is information drawn from official legal texts, organized so you can see what each law requires. Use it to brief your team and your lawyers, not in place of them.
What does Pro add?
The same plan as a CSV file for spreadsheets and audit files, and as a calendar file (.ics) with every dated duty as an event that links back to the law. Both are built from the states and uses you pick. The plan on this page, and printing it, are open to everyone.