1/1/2027Digital Content Provenance Standards Act1/1/2027General Provisions1/1/2027Enacted by Chapter 352, 2026 General Session2026Definitions.As used in this chapter:"Artificial intelligence" means a machine-based system that makes predictions, recommendations, or decisions influencing real or virtual environments."Capture device" means a device that can record photographs, audio, or video content, including a video camera, a still photography camera, a mobile phone with a built-in camera or microphone, or a voice recorder. "Capture device manufacturer" means a person who produces a capture device for sale in the state."Capture device manufacturer" does not include a person exclusively engaged in the assembly of a capture device."Compliant system provenance data" means system provenance data that is compliant with widely adopted specifications of an established standards-setting body."Covered provider" means a person that creates, codes, or otherwise produces a generative artificial intelligence system that:has over 1,000,000 monthly visitors or users; andis publicly accessible within the geographic boundaries of the state."Covered provider" does not include a person that creates, codes, or otherwise produces a generative artificial intelligence system that is used exclusively for the person's internal business operations and is not made publicly accessible."Digital signature" means a cryptography-based method that identifies the user or entity that attests to the information provided in the signed section."Generative artificial intelligence system" means an artificial intelligence system that can generate derived synthetic content, including text, images, video, or audio, that emulates the structure and characteristics of the system's training data."Large online platform" means a public-facing social media platform, mass messaging platform, or stand-alone search engine that distributes content to users who did not create or collaborate in creating the content and that exceeded 2,000,000 unique monthly users during the preceding 12 months."Large online platform" does not include:a broadband internet access service, as defined in 47 C.F.R. Sec. 8.1(b); ora telecommunications service, as defined in 47 U.S.C. Sec. 153."Latent" means present but not manifest."Manifest" means easily perceived, understood, or recognized by a natural person."Mass messaging platform" means a direct messaging platform that allows users to distribute content to more than 100 users simultaneously."Metadata" means structural or descriptive information about data."Personal information" means the same as that term is defined in Section 13-61-101."Provenance data" means data that is embedded into digital content, or that is included in the digital content's metadata, for the purpose of verifying the digital content's authenticity, origin, or history of modification."System provenance data" means provenance data that is not reasonably capable of being associated with a particular user and that contains:information regarding the type of device, system, or service that was used to generate a piece of digital content; orinformation related to content authenticity."User" means a Utah resident who accesses, interacts with, or uses an interactive computer service, platform, generation service, generative artificial intelligence system, or capture device."User interface" means the method by which an individual interacts with, controls, or receives information from a computer, software application, website, or electronic device.1/1/2027Content Provenance Standards And Requirements1/1/2027Enacted by Chapter 352, 2026 General Session2026Requirements for large online platforms.A large online platform shall:detect whether compliant system provenance data is embedded into or attached to content distributed on the large online platform;provide a user interface to disclose the availability of system provenance data; andallow a user to inspect all available compliant system provenance data in an easily accessible manner:directly through the large online platform's user interface described in Subsection (1)(b);by allowing the user to download the content's compliant system provenance data; orby providing a link to the content's system provenance data displayed on an internet website or in another application provided either by the large online platform or a third party.A large online platform may not, to the extent technically feasible, knowingly strip any system provenance data or digital signature that is compliant with widely adopted specifications adopted by an established standards-setting body from content uploaded or distributed on the large online platform.1/1/2027Enacted by Chapter 352, 2026 General Session2026Requirements for capture devices.A capture device manufacturer shall include a latent disclosure in content captured by the capture device that conveys:the name of the capture device manufacturer; ordigital signatures sufficient to prove whether the content was created using a type of capture device; andthe time and date of the content's creation or alteration.A capture device manufacturer may provide a user with the option to disable the latent disclosure on a capture device required in Subsection (1).A capture device manufacturer shall comply with this section only to the extent technically feasible and compliant with widely adopted specifications adopted by an established standards-setting body.This section applies to any capture device a capture device manufacturer produces for sale in the state on or after January 1, 2028.1/1/2027Enacted by Chapter 352, 2026 General Session2026User disclosures.A covered provider shall include a latent disclosure in image, video, or audio content, or content that is any combination of image, video, or audio, created or substantially modified by the covered provider's generative artificial intelligence system that meets the following criteria:to the extent that it is technically feasible and reasonable, the disclosure conveys the following information, either directly or through a link to a permanent internet website:the time and date of the content's creation or alteration; andeither:the name of the capture device manufacturer; ordigital signatures sufficient to prove whether the content was created or substantially altered using a generative artificial intelligence system; andthe disclosure is consistent with widely accepted industry standards.1/1/2027Enforcement1/1/2027Enacted by Chapter 352, 2026 General Session2026Enforcement -- Civil liability.The Division of Consumer Protection shall administer and enforce the provisions of Part 2, Content Provenance Standards and Requirements in accordance with Chapter 2, Division of Consumer Protection.In addition to the division's enforcement powers under Chapter 2, Division of Consumer Protection:the division director may impose an administrative fine of up to $2,500 for each violation of this chapter; andthe division may bring an action in a court of competent jurisdiction to enforce a provision of this chapter.In a court action by the division to enforce a provision of this chapter, the court may:declare that an act or practice violates a provision of this chapter;issue an injunction for a violation of this chapter;order disgorgement of money received in violation of this chapter;order payment of disgorged money to an injured purchaser or consumer;impose a fine of up to $2,500 for each violation of this chapter; oraward other relief that the court determines reasonable and necessary.If a court awards judgment or injunctive relief to the division, the court shall award the division:reasonable attorney fees;court costs; andinvestigative fees.A court may impose a civil penalty of no more than $5,000 for each violation of an administrative or court order issued for a violation of this chapter.The attorney general may bring a civil action on behalf of the division to collect a civil penalty imposed under this section.The division shall deposit all fines and civil penalties collected under this section into the Consumer Protection Education and Training Fund created in Section 13-2-8.Nothing in this chapter shall displace any other available remedies or rights authorized under the laws of this state or the United States.