Utah · statute
Utah AI Policy Act: what it requires, and the records to keep
Utah's Act requires businesses to disclose generative AI use when a person clearly asks, and requires licensed professionals to disclose it up front in high-risk interactions. It also bars blaming AI as a defence to consumer-protection violations and created an Office of AI Policy with a regulatory learning lab.
01 / What it requires
What Utah AI Policy Act requires
Suppliers using generative AI to interact with people in consumer transactions, and individuals providing services in occupations licensed or certified through the Utah Department of Commerce.
- 01Tell an individual they are interacting with generative AI, not a human, when they clearly and unambiguously ask.
- 02Regulated occupations: prominently disclose generative AI use in high-risk interactions, verbally at the start or in writing before.
- 03High-risk interactions include collecting health, financial or biometric data, or giving financial, legal, medical or mental health advice.
- 04Regulated occupations: meet all professional rules when providing services through generative AI.
- 05Do not rely on generative AI having made the statement or act as a defence to consumer-protection violations.
02 / AI work
Where it touches AI work
Applies to generative AI that simulates human conversation by text, audio or visual means. A safe harbour protects businesses whose AI clearly discloses at the outset and throughout that it is AI.
03 / Dates
The dates that matter
SB 149 takes effect; Office of AI Policy created
SB 332 signed, moving the Act's repeal date to 1 July 2027
SB 226 disclosure rules (Chapter 75) take effect
HB 320 Office of AI Policy Amendments signed
Scheduled repeal of the AI Policy Act (Chapter 72)
04 / Enforcement
Who enforces it
Utah Division of Consumer Protection, with the Attorney General as counsel; administrative or court fines up to $2,500 per violation, disgorgement and injunctions; up to $5,000 per violation of an order.
05 / Records
Records an organisation keeps
What an auditor or an inquiry usually asks to see. Your obligations depend on your role and your facts.
- 01Chatbot scripts showing AI disclosure at the outset and throughout
- 02Logs of responses to users asking whether they are talking to AI
- 03Classification of interactions as high-risk, by service line
- 04Pre-interaction disclosure records for licensed-professional services
Optional evidence · where Planisphere fits
Keep a record anyone can check
When your team meets a duty, Planisphere can seal the event it reports as a receipt.
A disclosure shown, a review signed, a model change approved: the event your system reports.
The event becomes a sealed receipt, dated and attributed to whoever is signed in.
Paste the receipt into Verify. No account or key.
A record supports your compliance evidence process. It is not a legal finding or a certification. Systems that call Planisphere's gate API can also hold or refuse an action before it runs.
QUESTIONS
The questions that come next
Does Utah require AI disclosure?+
Yes, in two situations. Since 7 May 2025, under SB 226, a business using generative AI to interact with a person in a consumer transaction must disclose that the person is dealing with AI, not a human, if the person clearly and unambiguously asks. People in occupations regulated by the Utah Department of Commerce must disclose proactively in high-risk interactions, such as collecting health, financial or biometric data or giving medical, legal, financial or mental health advice. The Division of Consumer Protection can fine up to $2,500 per violation. Read the full answer
SOURCES
Go back to the source
Utah State Legislature
Utah State Legislature
Office of the Governor of Utah
Future of Privacy Forum
CHANGE LOG
What changed, and when
Rebuilt from primary sources; facts checked on this date.
Related: FSMB AI / state boards · State Bar AI Opinions · SOPIPA · NYC Local Law 144 · Colorado AI Act · Texas TRAIGA