AI law in Utah

Includes US federal law, which applies in every state. See also United States (federal).

Get the build plan for Utah

The guards that cover the most here

50 guards address 68 items across 2 jurisdictions with binding law: 9 binding law in force, 0 enacted but not yet applying, 34 standards and frameworks, 24 TwinEthos recommended guardrails, 1 optional safe harbor.

1. AI chat interaction without disclosure

   Show an AI-identity notice at or before the first assistant turn, in the UI or as the opening message, and answer truthfully when asked if it is a bot.

   Addresses 5 items: 2 binding law in force · 2 standards · 1 recommended guardrail

   Law in force in Utah (US-UT).

2. AI agent configured to pose as, or claim affiliation with, a government body or a business it does not represent

   Make the agent's persona, greeting, and scripts name only the operating organization, and never instruct it to claim a government or third-party business identity or endorsement.

   Addresses 1 item: 1 binding law in force

   Law in force in United States (federal) (US).

3. Mental-health chatbot conversation content or health data sold or shared with third parties

   Strip chat text and health fields from every analytics, ad-pixel, CRM, and broker payload, and send health data to vendors only under a recorded HIPAA-equivalent contract.

   Addresses 1 item: 1 binding law in force

   Law in force in Utah (US-UT).

4. Mental-health chatbot conversation content used to target or tailor ads

   Feed ad selection, targeting keys, and ad personalization only from non-conversation data, never from chat text or the topics a model extracts from it.

   Addresses 1 item: 1 binding law in force

   Law in force in Utah (US-UT).

5. GenAI in regulated occupation without proactive disclosure

   Open each GenAI conversation on a licensed-professional service path with a prominent statement that the person is interacting with generative AI.

   Addresses 1 item: 1 binding law in force

   Law in force in Utah (US-UT).

6. Health information sent to an external AI vendor without the contractual or legal basis the law requires

   Send identifiable health data only to AI endpoints registered with a signed BAA or processing agreement and retention and training off; otherwise de-identify first.

   Addresses 1 item: 1 binding law in force

   Law in force in United States (federal) (US).

7. More health information than the task needs is sent to an AI model

   Build AI prompts, context and fine-tuning rows from a per-task allowlist of health-record fields, never by serializing a whole patient record or FHIR bundle.

   Addresses 1 item: 1 binding law in force

   Law in force in United States (federal) (US).

8. Advertising inside a chatbot conversation not labeled or sponsorship not disclosed

   Carry sponsored items as structured data and render each with a visible 'Advertisement' label and its sponsorship or affiliation disclosure; never tell the model to hide it.

   Addresses 1 item: 1 binding law in force

   Law in force in Utah (US-UT).

9. Adverse AI decision without explanation/appeal

   Send each adverse AI-assisted decision with its main reasons and the AI's role, plus a way to correct data and appeal to a human who can change the outcome.

   Addresses 3 items: 2 standards · 1 recommended guardrail

10. GenAI in consequential decisions without confabulation/output-validation controls

    Validate GenAI output against a schema and its cited sources, and send unverifiable claims to review, before it drives a consequential decision or record.

    Addresses 3 items: 2 standards · 1 recommended guardrail

The top 10 of 50; the build plan ranks all of them and lets you narrow by AI feature.

By AI feature

Plans for one feature in Utah:

• Chat or assistant
• Agents that use tools or take actions
• Generated text, images, audio or video
• Recommendations and feeds

Laws

• FTC Impersonation Rule (16 CFR Part 461) United States (federal) (US)
• HIPAA Privacy Rule (45 CFR 160, 164 Subpart E) United States (federal) (US)
• Utah AI Policy Act (Ch. 77) Utah (US-UT)
• Utah HB 452 (mental health chatbots, Utah Code 13-72a) Utah (US-UT)