Utah AI Policy Act: what it requires from your chatbot
Utah Artificial Intelligence Policy Act, Utah Code § 13-2-12 (SB 149, as amended May 2025)
When it applies
In force since May 1, 2024; amended effective May 7, 2025 (proactive duty narrowed to high-risk interactions, statutory safe harbor added). Enforced by the Utah Division of Consumer Protection.
The obligation
A supplier using generative AI in a consumer transaction must clearly and conspicuously disclose that the person is interacting with generative AI when the person clearly asks. High-risk interactions (collecting sensitive personal information while giving advice a person could rely on for significant financial, legal, medical, or mental-health decisions) require a prominent disclosure at the outset.
The disclosure pattern it expects
Utah grants a safe harbor from fines to suppliers who disclose clearly and conspicuously at the outset of the interaction and throughout it. Disclosed's persistent badge plus first-message notice is that pattern, and it removes the need to detect 'are you a bot?' questions.
Readiness checklist
- The chatbot discloses generative AI up front and keeps the badge visible throughout (this earns Utah's statutory safe harbor).
- If the bot collects sensitive personal data while giving advice for significant decisions, the outset disclosure is prominent.
- The disclosure is clear and conspicuous on the chat surface.
- Disclosure records are retained for consumer-protection inquiries.
See also the other jurisdictions: EU AI Act, Article 50(1) · Colorado ADMT law (SB 26-189) · California B.O.T. Act
Is your chatbot actually ready?
Six questions, an instant verdict, free.
Just need the deadline handled? The one-time EUR 129 compliance pack covers a single chatbot with no subscription.
Disclosed provides compliance tooling and records; this document is not legal advice. Review it with your counsel before relying on it.