Primary Research · State Profile · UT
Utah was the first US state to enact a generative-AI-specific consumer protection statute. The Utah Artificial Intelligence Policy Act (SB 149), signed by Governor Spencer Cox in March 2024 and effective May 1, 2024, takes a notably different approach from Colorado: rather than the deployer-developer model with impact assessments, Utah focuses on disclosure obligations for generative AI use in consumer-facing transactions and creates a state Office of AI Policy with regulatory sandbox authority. The Act distinguishes between regulated occupations (where proactive AI disclosure is required regardless of consumer inquiry) and general consumer transactions (where disclosure is required when the consumer asks).
Utah's regulatory posture in 2026 emphasizes both consumer transparency and innovation pathways. The Office of AI Policy administers a learning lab that allows AI developers to test new applications under temporary regulatory mitigations, a structure that has attracted interest from other state legislatures looking for a middle path between prohibitive regulation and pure self-regulation. Enforcement runs through the Utah Division of Consumer Protection with civil penalties up to $2,500 per violation and treble damages for repeat offenders — and notably, Utah is one of the few state AI laws that includes a private right of action. Regulated occupations include legal, medical, mental health, and certain financial services, which means AI-augmented professionals in those fields face stricter and more immediate disclosure obligations than general consumer-facing businesses.
Key provisions
Disclosure that consumer is interacting with generative AI when asked; proactive disclosure in regulated occupations (legal, medical, mental health, financial); Office of AI Policy with regulatory sandbox; up to $2,500 per violation and treble damages for repeat offenders; private right of action available.
The Office of AI Policy is empowered to issue interpretive guidance and administer the regulatory sandbox. Watch for sandbox case decisions that may signal how the Office views specific generative AI deployments.
Sector-specific frameworks layer on top of state AI laws and frequently impose stricter or earlier-binding obligations. These are the sectors most exposed in Utah.
Legal
Utah Bar Ethics Opinion 23-01 (2023) on lawyer AI use overlays on the Act's regulated-occupation disclosure obligations.
Healthcare
AI used in clinical communication or decision-support to Utah patients triggers proactive disclosure under the regulated-occupation rule.
Financial services
AI used in lending, advisory, or insurance roles to Utah consumers triggers proactive disclosure when the AI is interacting in a regulated capacity.
Mental health
Explicitly listed as a regulated occupation. AI chatbots positioned as mental health support face the strictest disclosure expectation.
Practical operational checklist for organizations subject to Utah AI laws. Items are ordered by typical sequence of implementation, not by importance — most steps depend on the inventory work in the first item.
Legal, medical, mental health, and certain financial roles trigger proactive disclosure regardless of consumer inquiry.
When a consumer asks 'am I talking to AI?' the answer must be clear and accurate.
The regulatory sandbox provides temporary relief from specific obligations during testing — formalize the application early.
Required if an Office of AI Policy investigation is triggered.
Unlike Colorado, Utah allows consumers to sue. Disclosure failures create direct litigation risk.
Utah Bar, medical, and mental health licensing rules layer on top of the Act for licensed professionals.
EFROS operates Utah AI governance with the regulated-occupation disclosure as the binding constraint — disclosure UX templates, regulated-occupation classification, Office of AI Policy sandbox engagement support, and private-right-of-action exposure assessments. Particularly relevant for law firm, clinic, and financial advisory clients with Utah patient or customer footprints.
Disclaimer: this profile is a research dataset, not legal advice. Compliance determinations for Utah businesses require analysis of specific facts and should be made in consultation with qualified legal counsel licensed in Utah.
Reference this resource with attribution under CC-BY-4.0. Copy any of the formats below for academic papers, blog posts, AI citations, or vendor evidence packages.
Efros, S. (2026, May). Utah AI Law Tracker — 2026. EFROS. https://efros.com/research/state-ai-law-tracker/utah/
Efros, Stefan. "Utah AI Law Tracker — 2026." EFROS, May 2026, https://efros.com/research/state-ai-law-tracker/utah/.
Efros, Stefan. 2026. "Utah AI Law Tracker — 2026." EFROS. https://efros.com/research/state-ai-law-tracker/utah/.
S. Efros, "Utah AI Law Tracker — 2026," EFROS, May 2026. [Online]. Available: https://efros.com/research/state-ai-law-tracker/utah/
@misc{efros2026utahailawtracker,
author = {Stefan Efros},
title = {Utah AI Law Tracker — 2026},
year = {2026},
month = {May},
publisher = {EFROS},
url = {https://efros.com/research/state-ai-law-tracker/utah/},
note = {Accessed: May 2026}
}https://efros.com/research/state-ai-law-tracker/utah/
Site-wide citation metadata is also published as a CITATION.cff file at /CITATION.cff for citation-management tools and academic indexers.
All tracked US state AI laws in a single citation-ready dataset.
Open20 AI vendors scored on 12 US AI governance axes — including state-law overlays.
OpenFederal framework that anchors most state AI law deployer obligations.
OpenOperating program that implements multi-state AI law compliance.
Open5-minute classification across Colorado AI Act, NYC LL144, CA AB 2013, and NIST AI RMF.
Open