Utah Artificial Intelligence Policy Act (SB 149, as amended by SB 226 and SB 332)
Utah · Utah Code ch. 13-77 (generative AI disclosures); ch. 13-72 (AI Policy Act) · effective 2024-05-01 · SB 226 replaced the original rule (§ 13-2-12) with the disclosure rules now in chapter 13-77, effective May 7, 2025. Only chapter 13-72, which sets up Utah's AI office and learning lab, is scheduled for repeal on July 1, 2027. Chapter 13-77 has no repeal date.
Summary
A supplier using generative AI with a person in a consumer transaction must say it is AI, not a human, when the person clearly asks. A stricter rule applies to people in occupations licensed or certified through the Department of Commerce: when AI in their services is a high-risk interaction (collecting health, financial or biometric data, or giving personalized financial, legal, medical or mental health advice), they must disclose it prominently, out loud at the start of a spoken interaction or in writing before a written one. A clear AI notice at the outset and throughout the interaction is a safe harbor from enforcement of both rules.
Who must comply
Suppliers using generative AI in consumer transactions with people in Utah; people in Department of Commerce regulated occupations when AI use is high-risk.
What you must disclose
Disclosure that the person is interacting with generative AI, not a human. Prominent disclosure for high-risk use in a regulated occupation.
When: When the person clearly asks; for high-risk use in a regulated occupation, at the start of a spoken interaction and before a written one.
Other duties
- Configure your bot to answer truthfully when asked 'Am I talking to a human / a bot?'
- People in regulated occupations must still meet all the rules of their occupation when using generative AI.
- 'The AI did it' is no defense to a violation of a consumer law the Division enforces.
Exemptions
- Safe harbor: no enforcement action under these disclosure rules if the AI clearly and conspicuously says it is AI or not human, at the outset and throughout the interaction.
Penalties
Administrative fines up to $2,500 per violation, plus court-ordered remedies; up to $5,000 per violation for violating an administrative or court order.