Utah Artificial Intelligence Policy Act

Utah enacted SB 149 in 2024 as the Artificial Intelligence Policy Act, effective May 1, 2024. The initial law used disclosure duties for regulated occupations and consumer transactions and created the Office of Artificial Intelligence Policy and an AI learning laboratory. In 2025, SB 226, the Artificial Intelligence Consumer Protection Amendments, substantially revised the disclosure scheme. Its relevant provisions took effect May 7, 2025. As amended, the prior Chapter 72 is scheduled for repeal July 1, 2027. Older summaries of the original SB 149 rules can therefore misstate today’s duties. The current framework distinguishes regulated occupations from other consumer-facing uses. A person in a regulated occupation must disclose use of generative AI in a high-risk interaction, including specified interactions involving sensitive personal information or personalized recommendations, advice, or information that could reasonably be relied on for significant personal decisions. For other consumer transactions, disclosure is required when the consumer clearly and unambiguously asks whether they are interacting with generative AI. The statute includes rules about when and how the disclosure appears and a safe harbor tied to disclosure by the AI system itself. The exact terms, definitions, and exceptions matter. A business cannot avoid consumer-protection responsibility by blaming generative AI. The Division of Consumer Protection enforces the law and may impose statutory penalties. Separately, Utah’s Office of AI Policy operates the learning laboratory, which can provide a structured route for studying AI policy and negotiating regulatory mitigation agreements for participants under stated conditions. The program does not exempt participants from every law. Utah’s model is narrower than a broad risk-management statute. It uses disclosure and existing consumer-protection mechanisms, while the learning laboratory supports experimentation. Product teams should check current Utah Code Chapter 75, the amended definitions, the regulated-professional status, interaction risk, disclosure placement, and any applicable consumer-protection duties. Since the 2025 law sets a sunset date for Chapter 72, future renewal or replacement legislation could change the framework again.