Utah was among the first states to enact AI-specific rules. The Artificial Intelligence Policy Act requires generative-AI disclosure on request and in high-risk interactions within regulated occupations, and it creates an AI Learning Laboratory and regulatory sandbox. Later amendments added targeted rules for mental-health chatbots, and a 2026 law, HB 276, adds AI content provenance rules from January 1, 2027.
Key points
- The Utah AI Policy Act (SB 149) took effect May 1, 2024.
- It requires disclosure of generative-AI use on a clear request, and proactively for high-risk interactions in regulated occupations.
- It created an Office of Artificial Intelligence Policy and a regulatory sandbox. In October 2026 the office signed five regulatory mitigation agreements for clinical AI pilots, among them physician-reviewed AI prescription refills, and named six outside evaluators, as the state added a healthcare pillar to its Pro-Human AI Initiative.
- 2025 amendments added disclosure duties for mental-health chatbots.
- HB 276 (2026) requires large generative AI providers to embed provenance data in AI images, video, and audio from January 1, 2027.
- The Office of AI Policy and its sandbox are scheduled to sunset on July 1, 2027 unless the Legislature extends them.
- Executive Order 2026-08, signed October 6, 2026, directs the Department of Government Operations to help agencies deploy AI while ensuring human-in-the-loop review of determinations affecting individual rights, and requires AI literacy training for agency employees and documentation of how agencies use AI, with annual progress reports from July 1, 2027.
Laws and instruments
Utah Artificial Intelligence Policy Act
SB 149 (2024)
Requires disclosure of generative-AI use to consumers and clarifies that existing consumer-protection law applies to AI. Establishes an AI policy office and sandbox for supervised experimentation. 2025 amendments narrowed the disclosure duties to clear requests and high-risk interactions and extended the sunset of the office and sandbox to July 1, 2027.
Effective: May 1, 2024
HB 452: Mental-health chatbots
HB 452 (2025); Utah Code Title 13, Chapter 72a
Requires suppliers of mental-health chatbots to disclose that users are talking to AI before access, after seven days without use, and whenever asked. Limits the sale or sharing of users' health information and restricts advertising through the chatbot.
Effective: May 7, 2025
HB 276: Content provenance and counterfeit intimate images
HB 276 (2026); Utah Code Title 13, Chapters 72b and 72c
Requires generative AI providers with over 1,000,000 monthly users to embed provenance disclosures in AI-generated images, video, and audio, and requires large online platforms to detect and display provenance data. Bars generation services and covered platforms from distributing counterfeit intimate images without verified consent. The Division of Consumer Protection enforces the provenance rules with fines of up to $2,500 per violation.
Effective: January 1, 2027 (capture-device duties apply to devices made for sale from January 1, 2028)
Timeline
- May 1, 2024
Utah AI Policy Act takes effect.
- March 25, 2025
Governor Cox signs SB 332, moving the Act's repeal date to July 1, 2027.
- May 7, 2025
SB 226 narrows the disclosure duties and HB 452 adds mental-health chatbot rules.
- March 24, 2026
Governor Cox signs HB 276 on AI content provenance and counterfeit intimate images.
- May 6, 2026
HB 320 revises the learning laboratory and adds joint interpretation agreements.
- October 5, 2026
Utah adds a healthcare pillar to its Pro-Human AI Initiative; the Office of AI Policy signs five regulatory mitigation agreements for clinical AI pilots and names six third-party evaluators.
- October 6, 2026
Governor Cox signs Executive Order 2026-08 on a pro-human approach to AI in state government, with annual progress reports from July 1, 2027.
- January 1, 2027
HB 276 provenance and counterfeit intimate image rules take effect.
- July 1, 2027
Scheduled repeal of the AI Policy Act's office and sandbox chapter unless the Legislature extends it.
Who it applies to
Businesses using generative AI with Utah consumers, with stricter duties for state-regulated occupations; suppliers of mental-health chatbots; and, from January 1, 2027, large generative AI providers and online platforms under the provenance law.
Penalties
Administrative fines of up to $2,500 per violation, enforced by the Utah Division of Consumer Protection.
Recent developments
October 6, 2026
Office of the Governor of Utah
Utah sets a pro-human AI order for state agencies and adds clinical AI pilots to its sandbox
Governor Cox signed Executive Order 2026-08, which directs the Department of Government Operations to help agencies deploy AI while ensuring human-in-the-loop review of determinations affecting individual rights, requires agency employees to complete AI literacy training and agencies to document how AI systems feed their decisions, and calls for progress reports from July 1, 2027. A day earlier the state added a healthcare pillar to its Pro-Human AI Initiative, and the Office of Artificial Intelligence Policy signed five regulatory mitigation agreements for sandbox pilots, including a stage-gated pilot of physician-reviewed AI prescription refills, and named six independent evaluators.
Common questions
Does Utah have a comprehensive AI law?
Not a comprehensive one. Utah was among the first states to enact AI-specific rules. The Artificial Intelligence Policy Act requires generative-AI disclosure on request and in high-risk interactions within regulated occupations, and it creates an AI Learning Laboratory and regulatory sandbox. Later amendments added targeted rules for mental-health chatbots, and a 2026 law, HB 276, adds AI content provenance rules from January 1, 2027.
What are the penalties for AI violations in Utah?
Administrative fines of up to $2,500 per violation, enforced by the Utah Division of Consumer Protection.
Who does AI regulation in Utah apply to?
Businesses using generative AI with Utah consumers, with stricter duties for state-regulated occupations; suppliers of mental-health chatbots; and, from January 1, 2027, large generative AI providers and online platforms under the provenance law.
Cite this page
Artificial Intelligence Regulations, "AI Regulation in Utah," reviewed October 26, 2026, https://artificialintelligenceregulations.com/jurisdictions/utah.html.
Entries state the position as of the review date and link to the primary text for verification.
