HB 165 establishes security protocols for Utah's critical infrastructure (like power grids, water systems, and state data networks) by addressing risks from foreign adversary technology. It requires the Utah Cyber Center to create annual guidance for state agencies on assessing risks from foreign adversary tech, prohibits state contracts with such companies for critical infrastructure, and bans federally banned equipment. Agencies may request voluntary security assessments for existing or planned foreign adversary technology use, though recommendations are advisory only and don't mandate contract changes or technology transitions. The bill directly affects all state agencies operating critical infrastructure systems and takes effect May 6, 2026.
SB 38 reorganizes Utah's consumer protection laws by renaming and renumbering existing chapters, such as moving the Health Spa Services Act to "Fitness Center Services," and adds a new Chapter 77 specifically requiring generative AI service providers to disclose certain information to consumers. It updates registration and reporting rules for businesses, clarifies the Division of Consumer Protection's enforcement authority, and specifies when the division may deny or revoke business registrations. The bill directly affects businesses operating in regulated sectors like credit services, charitable solicitations, fitness centers, and now AI service providers. Key changes include mandatory AI disclosures, updated surety bond requirements, and streamlined processes for maintaining registration with the division.
HB 59 requires businesses serving alcohol (including restaurants, bars, taverns, and beer retailers) to verify the age of individuals appearing to be 35 years old or younger before serving them alcohol or admitting them to the premises. It mandates electronic verification of ID using state-approved technology, limits displayed information to basic details (name, age, ID number), and requires businesses to retain verification data for seven days. The bill also allows authorized personnel to confiscate suspected fake IDs and report them to law enforcement. This law takes effect May 6, 2026, and applies retroactively from January 1, 2026.
SB 322 creates a regulatory sandbox in Utah public schools to safely test educational AI tools under new safety standards. It directly affects public schools, educators, students, and edtech vendors by requiring safety testing, parental opt-out rights, and prohibitions against AI simulating personal relationships with students. Key provisions include mandatory evidence-based evaluations, transparency requirements for vendors, integration with existing student data privacy laws (Title 53E), and a five-year sunset. The bill establishes new oversight through an Education Technology Advisory Council and limits the State Board of Education’s role in approving pilot programs.
HB 438, the AI Companion Chatbot Safety Act, regulates companies that create AI chatbots designed for emotional engagement. It requires suppliers to implement safety protocols for identifying risks, conduct independent safety evaluations, and publicly report on safety measures and user engagement. The bill specifically prohibits sharing minors' data, sending unsolicited messages to encourage use, exposing minors to harmful content, or hiding that the chatbot is AI (mandating clear disclosure). It grants enforcement authority to Utah's Division of Consumer Protection and establishes fines for violations. The law directly affects AI chatbot developers and users, particularly minors, by setting concrete safety and transparency standards.
SB 205 requires Utah law enforcement agencies to publicly share policies governing the use of artificial intelligence (AI) tools, including which AI systems officers may use and how they must be configured. It mandates that any police report or record created partly using AI must include a clear disclaimer and a certification that the content was reviewed for accuracy. Agencies must post their full AI policies and detailed information about AI settings - such as transparency features or crime-specific restrictions - on their websites or the state public notice site. This law directly affects all Utah police departments and sheriff's offices, ensuring transparency about AI use in investigations. The bill takes effect on May 6, 2026, with no new funding required.
HB 26 amends Utah's voting equipment rules to enhance security and standardize procurement. It bans wireless communication in all voting machines (except electronic pollbooks), repeals outdated ranked-choice voting certification rules, and requires election officials to purchase only equipment selected by the lieutenant governor's new voting equipment system. The bill creates a Voting Equipment Selection Committee to help the lieutenant governor evaluate and procure secure voting systems that meet mechanical ballot requirements. These changes directly affect election officials, vendors, and voters by standardizing equipment security and procurement processes.
HB 55 requires schools and government agencies contracting with education technology vendors to include specific privacy clauses in their agreements. It mandates that if a vendor illegally sells student data (violating state or federal law), the school must notify the vendor within 30 days and terminate the contract if the violation isn’t fixed within another 30 days. The bill also prohibits vendors from charging fees or seeking damages for contract termination due to privacy violations and repeals a prior provision allowing vendors to respond to student feedback requests. This directly affects schools, their ed tech vendors, and student data privacy protections under Utah law.
SB 5 is the General Government Base Budget bill for Utah's fiscal years 2026 (July 1, 2025-June 30, 2026) and 2027 (July 1, 2026-June 30, 2027). It appropriates a total of $538.3 million for state agency operations in FY2026, including $387.1 million for FY2027, primarily from the General Fund and Income Tax Fund. The bill allocates specific funds to agencies like the Department of Commerce (for business licensing and AI policy development), Insurance Department (for autism coverage and fraud programs), and Tax Commission (for license plates and tax administration). These funds cover ongoing operations, system upgrades, and program activities without specifying new policy changes or eligibility criteria.