Question · Utah AI Policy Act
Does Utah require AI disclosure?
Utah's Act requires businesses to disclose generative AI use when a person clearly asks, and requires licensed professionals to disclose it up front in high-risk interactions.
01 / The answer
The short answer
Yes, in two situations. Since 7 May 2025, under SB 226, a business using generative AI to interact with a person in a consumer transaction must disclose that the person is dealing with AI, not a human, if the person clearly and unambiguously asks. People in occupations regulated by the Utah Department of Commerce must disclose proactively in high-risk interactions, such as collecting health, financial or biometric data or giving medical, legal, financial or mental health advice. The Division of Consumer Protection can fine up to $2,500 per violation.
02 / The rule
What Utah AI Policy Act requires
Utah's Act requires businesses to disclose generative AI use when a person clearly asks, and requires licensed professionals to disclose it up front in high-risk interactions. It also bars blaming AI as a defence to consumer-protection violations and created an Office of AI Policy with a regulatory learning lab.
- 01Tell an individual they are interacting with generative AI, not a human, when they clearly and unambiguously ask.
- 02Regulated occupations: prominently disclose generative AI use in high-risk interactions, verbally at the start or in writing before.
- 03High-risk interactions include collecting health, financial or biometric data, or giving financial, legal, medical or mental health advice.
- 04Regulated occupations: meet all professional rules when providing services through generative AI.
03 / Records
Records to keep
- 01Chatbot scripts showing AI disclosure at the outset and throughout
- 02Logs of responses to users asking whether they are talking to AI
- 03Classification of interactions as high-risk, by service line
- 04Pre-interaction disclosure records for licensed-professional services
Optional evidence · where Planisphere fits
Keep a record anyone can check
When your team meets a duty, Planisphere can seal the event it reports as a receipt.
A disclosure shown, a review signed, a model change approved: the event your system reports.
The event becomes a sealed receipt, dated and attributed to whoever is signed in.
Paste the receipt into Verify. No account or key.
A record supports your compliance evidence process. It is not a legal finding or a certification. Systems that call Planisphere's gate API can also hold or refuse an action before it runs.
SOURCES
Go back to the source
Utah State Legislature
Utah State Legislature
Office of the Governor of Utah
Future of Privacy Forum
RELATED
Related: Utah AI Policy Act: the full guide