HB 3 adjusts state government budgets for fiscal years 2026 and 2027 by increasing or decreasing funding for various agencies, education programs, and higher education institutions. The bill provides specific budget changes for criminal justice agencies, including the Governor's Office, Board of Pardons and Parole, Judicial Council, and Department of Public Safety, with some funds designated for technology upgrades and program implementation. It also allocates money to support bills passed in the 2026 General Session and includes intent language regarding fund usage. The legislation appropriates hundreds of millions of dollars across operating budgets, expendable funds, and business-like activities from multiple funding sources including the General Fund, Income Tax Fund, and various restricted accounts.
SB 256 updates Utah's defamation laws to address AI-generated content and identity protection. It clarifies that AI-created or digitally manipulated content (like deepfakes) still falls under libel/slander laws, requires publishers to receive written notice before a lawsuit can be filed, and limits damages to actual harm if the content is removed within 10 days of notice. The bill also establishes a new right for individuals to consent to the use of their personal identity (including voice, likeness, or name) and expands "identity abuse" to include unauthorized distribution of identity-replication tools. This directly affects content creators, publishers, and anyone whose identity might be used without consent in AI-generated media. The bill is currently in early legislative stages (House committee review).
SB 275 creates Utah's State-Endorsed Digital Identity Program, managed by the Department of Government Operations. It establishes a digital identity bill of rights, sets standards for verifying identities, and allows state-verified digital IDs to be used as proof of age (e.g., for purchasing alcohol or tobacco). The program requires government agencies, healthcare providers, and digital wallet services to follow specific security and privacy rules when processing these identities. It does not create new costs, as no funding is appropriated, and replaces outdated electronic ID provisions upon sunset review.
HB 72 requires Utah law enforcement to complete cryptocurrency investigation training and mandates prosecuting agencies to certify at least one digital asset specialist. It imposes licensing, registration, and consumer protection rules on virtual currency kiosk operators, including daily transaction limits of $1,000 per customer, a 3% fee cap, mandatory blockchain fraud analysis, and clear disclosure requirements. Kiosks must display multilingual fraud warnings and provide detailed transaction receipts in the customer’s chosen language. The bill also requires law enforcement agencies to report cryptocurrency investigation data to a state commission, which must publish annual legislative summaries.
Utah's legislature passed SCR 10, a concurrent resolution expressing the state's commitment to advancing Advanced Air Mobility (AAM) technologies like air taxis and drone deliveries. The resolution highlights Utah's aerospace innovation history, its geographic and regulatory advantages for AAM testing, and sets a goal to establish an operational AAM system and vertiport network by the 2034 Winter Olympics. It emphasizes collaboration with federal agencies (like the FAA and DOT) without appropriating state funds, instead focusing on policy leadership and coordination. The resolution serves as a formal statement to showcase Utah as a model for AAM development to federal partners.
HB 261 amends Utah's Electronic Information Privacy Act to clarify how law enforcement agencies may access electronic data. It requires warrants for most electronic information, location data, or transmitted data during criminal investigations, directly affecting law enforcement agencies and service providers like phone companies. Key provisions prohibit law enforcement from outsourcing data collection to third parties in ways they couldn’t do themselves, and mandate that illegally obtained data - or evidence derived from it - be excluded from court, similar to constitutional violations. The bill updates definitions and procedures without appropriating new funds or creating new financial obligations.
HB 276 creates Utah's "Digital Voyeurism Prevention Act" to address non-consensual AI-generated intimate images. It directly affects platforms and services that let users create such images (called "generation services"), requiring them to obtain and verify explicit consent from the person depicted before distributing any AI-generated intimate image. The bill mandates platforms to implement verification systems, disclose provenance data for AI content, and follow notice-and-takedown procedures for violations. It establishes civil liability for damages, including actual losses and attorney fees, enforced by Utah's Division of Consumer Protection.
HB 425 restricts how Utah cities and towns can charge certain fees. It bars cities from imposing general fees for broadband internet or public safety services (like police/fire) on the public, with limited exceptions (e.g., fees for bonds issued before 2026 must end by 2027). Similarly, towns cannot charge general fees for public safety services, except for existing fees tied to agreements between towns or volunteer services, which must be renewed every three years. The bill also creates a new process for municipalities to establish transportation utility fees (for services like roads), requiring annual reviews, appeal mechanisms, and local referendums for new fees.
SB 290 strengthens privacy protections for victims and witnesses in Utah criminal cases by regulating access to their nonpublic electronic data, such as personal messages or intimate images shared with law enforcement. It requires law enforcement to implement secure "virtual rooms" for defendants' attorneys to review sensitive data without copying it, creates a presumption against disclosing intimate images, and mandates clear disclosure of devices used in investigations. The bill directly affects victims/witnesses (who gain greater control over their private information), law enforcement (who must adopt new policies), and defendants (who must seek court approval to access nonpublic data). Key provisions include defining "nonpublic victim or witness data," requiring prosecutors to notify defendants about device searches, and limiting data sharing to specific court-approved scenarios. The bill makes no changes to existing evidence disclosure rules under Utah Rules of Criminal Procedure.
HB 474 updates Utah's Uniform Commercial Code to modernize rules for digital transactions. It replaces "writing" with "record" to include electronic documents and creates new rules for controlling digital assets like bank accounts, electronic titles, and payment intangibles. The bill clarifies when a secured party (e.g., a bank or lender) has control over electronic records, affecting how security interests attach and are enforced in digital transactions. Businesses, financial institutions, and individuals using electronic contracts or digital assets in Utah will directly experience these changes, as the bill aligns Utah's commercial law with current electronic commerce practices.
