Requires disclosures when generative AI is used in consumer transactions and regulated services. Establishes liability for AI-related consumer protection violations. Grants enforcement authority to the Division of Consumer Protection. Provides a safe harbor for certain AI disclosures.
Analysis summaries, actor details, and coverage mappings were LLM-classified and may contain errors.
This is a binding state statute enacted by the Utah Legislature with mandatory disclosure requirements, enforcement mechanisms including administrative fines up to $2,500 per violation and court-imposed fines up to $5,000 for violating orders, and designated enforcement authority to the Division of Consumer Protection and Attorney General.
The document has minimal coverage of risk domains, primarily addressing consumer protection aspects related to transparency and disclosure requirements. It touches on privacy concerns (2.1) through requirements for high-risk AI interactions involving sensitive data, and has implicit minimal coverage of misinformation risks (3.1) through liability provisions. The document does not substantively address most AI risk domains as it focuses on procedural disclosure requirements rather than risk mitigation.
This legislation governs AI use across multiple sectors through two primary mechanisms: (1) broad consumer transaction requirements applicable to Trade, Transportation and Utilities, Information, Finance and Insurance, and Professional and Technical Services sectors, and (2) specific requirements for regulated occupations which primarily affect Health Care and Social Assistance, Professional and Technical Services, and Finance and Insurance sectors.
The document primarily addresses the Deploy and Operate and Monitor stages of the AI lifecycle. It focuses on disclosure requirements when generative AI is deployed in consumer transactions and regulated services, and establishes ongoing monitoring and enforcement mechanisms through the Division of Consumer Protection.
The document explicitly defines and focuses on 'generative artificial intelligence' as AI systems trained on data that simulate human conversation through text, audio, or visual communication and generate non-scripted outputs. It also references the broader term 'artificial intelligence technology' by cross-reference to another statute. The document does not mention frontier AI, general purpose AI, foundation models, predictive AI, open-weight models, or compute thresholds.
This is a state bill enacted by the Legislature of the state of Utah, as indicated in the enactment clause and the document structure showing it as Utah SB 226.
The bill explicitly grants enforcement authority to the Division of Consumer Protection and assigns the Attorney General to provide legal advice and act as counsel. The division director can impose administrative fines and bring court actions.
The Division of Consumer Protection is responsible for administering and enforcing the chapter, which includes monitoring compliance. The Office of Artificial Intelligence Policy is consulted in rulemaking regarding disclosure methods.
The bill explicitly targets suppliers that use generative AI to interact with individuals in consumer transactions and individuals providing regulated services who use generative AI, particularly in high-risk interactions.