UT AI Policy Act
Utah Artificial Intelligence Policy Act
First major US state AI consumer protection law. Requires GenAI disclosure on request (reactive) and at outset for high-risk interactions (proactive). Entity deploying GenAI liable for its consumer protection violations. Creates AI Learning Laboratory sandbox.
Jurisdiction
Utah
Enacted
Mar 13, 2024
Effective
May 1, 2024
Enforcement
Utah Division of Consumer Protection
Original law May 2024; amended by SB 226 and SB 332 in 2025; sunset extended to July 2027
Utah LegislatureWhy It Matters
Parent law to HB 452 (mental health chatbots). Broad GenAI disclosure requirements. 'Regulated occupations' includes mental health therapists. Sandbox program actively testing AI products.
Recent Developments
SB 226 (May 2025) narrowed GenAI definition to require 'designed to simulate human conversation'; narrowed disclosure triggers. SB 332 extended sunset to July 2027. First sandbox agreement was with student mental health chatbot.
At a Glance
Applies to
Requires
Who Must Comply
- Any entity using generative AI to interact with Utah consumers
- Regulated occupations (30+ healthcare professions including mental health therapists)
- Businesses headquartered outside Utah serving Utah residents
Obligations fall on:
Safety Provisions
- GenAI liability - deployer liable for AI's consumer protection violations
- Reactive disclosure on clear and unambiguous consumer request
- Proactive disclosure for regulated occupations in high-risk AI interactions
- Safe harbor for AI that clearly self-discloses as nonhuman throughout interaction
- AI Learning Laboratory Program (regulatory sandbox)
Exemptions
Scripted Outputs Only
AI providing only scripted outputs exempt
- • Only provides scripted/predetermined outputs
Human Connection Facilitators
AI that merely connects users to human professionals
- • Facilitates connection to humans
- • Does not provide substantive interaction
Non-Generative AI
Non-generative AI (behind-the-scenes systems) exempt
- • Not generative AI
- • Not consumer-facing
Compliance & Enforcement
Key Dates
May 1, 2024
Original SB 149 effective
May 7, 2025
SB 226 amendments effective (narrowed scope)
Jul 1, 2027
Current sunset/repeal date
Penalties
Administrative: up to $2,500/violation. Civil: up to $5,000/violation of court/administrative order.
View on map
Utah
Focus Areas
Cite This
APA
Utah. (2024). Utah Artificial Intelligence Policy Act.
Related Regulations
Utah AI Mental Health Act
Consumer protection requirements for mental health chatbots including disclosure obligations and safeguards. Specifically targets AI applications marketed for mental health support.
CA AB 1405
Requires AI auditors to register with the Government Operations Agency and bars unregistered persons from offering, selling or conducting a covered AI audit from January 1, 2029. Registered auditors must maintain independence from the auditee, follow applicable audit protocols, report in detail, and keep records for at least 10 years. Certified public accountants licensed by the California Board of Accountancy are treated as satisfying the independence requirements if they comply with applicable professional standards.
CA SB 813
Creates a voluntary state designation for independent verification organizations: AI auditors that the Government Operations Agency recognises as having demonstrated expertise in assessing the risks posed by an AI system or model. The agency must establish application requirements, designation criteria and suspension procedures on or before January 1, 2028, and designated organizations report annually to the Legislature. Engaging a designated organization is not mandatory for AI developers or deployers.
CA SB 947
Adds Labor Code Part 5.5.5 on employers' use of automated decision systems (ADS). Bars using an ADS to violate labor or civil rights law, to infer an employee's protected status, or to predict and act against workers exercising legal rights; bars relying solely on an ADS for disciplinary or termination decisions and requires human corroboration where an ADS output is the primary basis; and requires a written post-use notice and, on request, a description of the employee's data used. Operative July 1, 2027.
HI Deepfake Civil Remedy Act
Creates a civil cause of action allowing individuals to sue over realistic digital imitations (deepfakes) depicting them without consent, with statutory damages available.
ND Healthcare AI Act
Regulates AI use in healthcare prior authorization decisions. Requires adverse determinations be reviewed by licensed physicians qualified in relevant specialty. Sets decision timelines: 7 days for non-urgent, 72 hours for urgent services. Prohibits prior authorization for emergency services and opioid use disorder treatment.
Last updated January 22, 2026. Verify against primary sources before relying on this information.