Binding law — not yet in force or stayed
For capture devices (cameras, phones with a camera or microphone, voice recorders) a manufacturer produces for sale in Utah on or after 2028-01-01, the manufacturer must include a latent disclosure in captured content conveying the manufacturer's name or digital signatures sufficient to prove whether the content was created using a type of capture device, and the time and date of creation or alteration, to the extent technically feasible and compliant with widely adopted standards; users may be given the option to disable it (Utah Code 13-72c-101, 13-72c-202). Detect device firmware or manufacturer camera apps that save captures with no provenance manifest, or ship the setting off.
ut-hb276.capture-device-latent-disclosure · Utah Code 13-72c-202 (H.B. 276 (2026), Section 17) · official source · applies from 2028-01-01 · jurisdictions: US-UT
The guard to add, and how far to trust this rule
Binding law — not yet in force or stayed
From 2027-01-01, a covered provider (a person that creates, codes or otherwise produces a generative AI system with over 1,000,000 monthly visitors or users that is publicly accessible in Utah) must include a latent disclosure in image, video or audio content its system creates or substantially modifies, consistent with widely accepted industry standards, conveying, to the extent technically feasible and reasonable, the time and date of creation or alteration and either the capture device manufacturer's name or digital signatures sufficient to prove whether a generative AI system created or substantially altered it, directly or through a link to a permanent website (Utah Code 13-72c-101, 13-72c-203). Detect media-generation code that writes or serves output with no C2PA manifest or watermark.
ut-hb276.genai-latent-disclosure · Utah Code 13-72c-203 (H.B. 276 (2026), Section 18) · official source · applies from 2027-01-01 · jurisdictions: US-UT
The guard to add, and how far to trust this rule
Binding law — not yet in force or stayed
From 2027-01-01, a generation service (an interactive computer service that lets users generate intimate images with artificial intelligence on servers it controls and distributes them to users) may not distribute a counterfeit intimate image without first obtaining the consent of the identifiable individual depicted. It must run a consent system that requires that individual to affirmatively consent before distribution, assures the identity of the person consenting with reasonable accuracy, and keeps a record of the consent for at least seven years, asking for no more personal information than that needs; consent is specific to the image, given before generation and revocable (Utah Code 13-72b-101, 13-72b-201). Detect intimate or explicit image generation paths with no check of the depicted person's verified consent.
ut-hb276.generation-service-intimate-image-consent-system · Utah Code 13-72b-201 (H.B. 276 (2026), Section 3) · official source · applies from 2027-01-01 · jurisdictions: US-UT
The guard to add, and how far to trust this rule
Binding law — not yet in force or stayed
From 2027-01-01, a large online platform (a public-facing social media platform, mass messaging platform or stand-alone search engine that distributes content to users who did not create it and exceeded 2,000,000 unique monthly users in the preceding 12 months) must detect whether compliant system provenance data is embedded in or attached to content it distributes, provide a user interface disclosing that provenance data is available, and let users inspect it in the interface, by download or through a link; to the extent technically feasible it may not knowingly strip standards-compliant system provenance data or digital signatures from uploaded or distributed content (Utah Code 13-72c-101, 13-72c-201). Detect upload and media pipelines that strip metadata or distribute uploads without reading provenance.
ut-hb276.large-platform-provenance-detection-and-display · Utah Code 13-72c-201 (H.B. 276 (2026), Section 16) · official source · applies from 2027-01-01 · jurisdictions: US-UT
The guard to add, and how far to trust this rule
