<chapter number="13-77"><effdate>5/7/2025</effdate><catchline>Generative Artificial Intelligence — Consumer Disclosures and Enforcement</catchline><part number="13-77-1"><catchline>General Provisions</catchline><section number="13-77-101"><histories><history>Amended by Chapter <modchap sess="2026GS">95</modchap>, 2026 General Session</history><modyear>2026</modyear></histories><catchline>Definitions.</catchline>As used in this chapter:<subsection number="13-77-101(1)">"Artificial intelligence technology" means the same as that term is defined in Section <xref depth="3" refnumber="13-72-101">13-72-101</xref>.</subsection><subsection number="13-77-101(2)">"Consumer transaction" means the same as that term is defined in Section <xref depth="3" refnumber="13-11-3">13-11-3</xref>.</subsection><subsection number="13-77-101(3)">"Division" means the Division of Consumer Protection created in Section <xref depth="3" refnumber="13-2-102">13-2-102</xref>.</subsection><subsection number="13-77-101(4)">"Generative artificial intelligence" means an artificial intelligence technology system that:<subsection number="13-77-101(4)(a)">is trained on data;</subsection><subsection number="13-77-101(4)(b)">is designed to simulate human conversation with a consumer through one or more of the following:<subsection number="13-77-101(4)(b)(i)">text;</subsection><subsection number="13-77-101(4)(b)(ii)">audio; or</subsection><subsection number="13-77-101(4)(b)(iii)">visual communication; and</subsection></subsection><subsection number="13-77-101(4)(c)">generates non-scripted outputs similar to outputs created by a human, with limited or no human oversight.</subsection></subsection><subsection number="13-77-101(5)">"High-risk artificial intelligence interaction" means an interaction with generative artificial intelligence that involves:<subsection number="13-77-101(5)(a)">the collection of sensitive personal information, including:<subsection number="13-77-101(5)(a)(i)">health data;</subsection><subsection number="13-77-101(5)(a)(ii)">financial data; or</subsection><subsection number="13-77-101(5)(a)(iii)">biometric data;</subsection></subsection><subsection number="13-77-101(5)(b)">the provision of personalized recommendations, advice, or information that could reasonably be relied upon to make significant personal decisions, including the provision of:<subsection number="13-77-101(5)(b)(i)">financial advice or services;</subsection><subsection number="13-77-101(5)(b)(ii)">legal advice or services;</subsection><subsection number="13-77-101(5)(b)(iii)">medical advice or services; or</subsection><subsection number="13-77-101(5)(b)(iv)">mental health advice or services; or</subsection></subsection><subsection number="13-77-101(5)(c)">other applications as defined by division rule.</subsection></subsection><subsection number="13-77-101(6)">"License" means a state-granted authorization for an individual to engage in a specified occupation:<subsection number="13-77-101(6)(a)">based on the individual meeting personal qualifications established under state law; and</subsection><subsection number="13-77-101(6)(b)">that is required before the individual may lawfully engage in the occupation for compensation.</subsection></subsection><subsection number="13-77-101(7)">"Office" means the Office of Artificial Intelligence Policy created in Section <xref depth="3" refnumber="13-72-201">13-72-201</xref>.</subsection><subsection number="13-77-101(8)">"Regulated occupation" means an occupation that:<subsection number="13-77-101(8)(a)">is regulated by the Department of Commerce; and</subsection><subsection number="13-77-101(8)(b)">requires an individual to obtain a license or state certification to practice the occupation.</subsection></subsection><subsection number="13-77-101(9)">"State certification" means a state-granted authorization that:<subsection number="13-77-101(9)(a)">permits an individual to use the term "state certified" as part of a designated title related to a specified occupation:<subsection number="13-77-101(9)(a)(i)">based on the individual meeting personal qualifications established under state law; and</subsection><subsection number="13-77-101(9)(a)(ii)">where state law prohibits a noncertified individual from using the term "state certified" as part of a designated title; and</subsection></subsection><subsection number="13-77-101(9)(b)">does not prohibit a noncertified individual from engaging in the occupation for compensation.</subsection></subsection><subsection number="13-77-101(10)">"Supplier" means the same as that term is defined in Section <xref depth="3" refnumber="13-11-3">13-11-3</xref>.</subsection></section><section number="13-77-102"><histories><history>Amended by Chapter <modchap sess="2026GS">95</modchap>, 2026 General Session</history><modyear>2026</modyear></histories><catchline>Liability for violation of consumer protection law.</catchline>It is not a defense to the violation of any statute administered and enforced by the division under Section <xref depth="3" refnumber="13-2-102">13-2-102</xref> that generative artificial intelligence:<subsection number="13-77-102(1)">made the violative statement;</subsection><subsection number="13-77-102(2)">undertook the violative act; or</subsection><subsection number="13-77-102(3)">was used in furtherance of the violation.</subsection></section><section number="13-77-103"><histories><history>Enacted by Chapter <modchap sess="2025GS">465</modchap>, 2025 General Session</history><modyear>2025</modyear></histories><catchline>Required disclosures.</catchline><subsection number="13-77-103(1)"><subsection number="13-77-103(1)(a)">A supplier that uses generative artificial intelligence to interact with an individual in connection with a consumer transaction shall disclose to the individual that the individual is interacting with generative artificial intelligence and not a human, if the individual asks or otherwise prompts the supplier about whether artificial intelligence is being used.</subsection><subsection number="13-77-103(1)(b)">The individual's prompt or question under Subsection (1)(a) must be a clear and unambiguous request to determine whether the interaction is with a human or with artificial intelligence.</subsection></subsection><subsection number="13-77-103(2)">An individual providing services in a regulated occupation shall:<subsection number="13-77-103(2)(a)">prominently disclose when an individual receiving services is interacting with generative artificial intelligence in the provision of regulated services if the use of generative artificial intelligence constitutes a high-risk artificial intelligence interaction; and</subsection><subsection number="13-77-103(2)(b)">comply with all requirements of the regulated occupation when providing services through generative artificial intelligence.</subsection></subsection><subsection number="13-77-103(3)">A disclosure required under Subsection <xref tempid="448" depth="4" refnumber="(2)">(2)</xref> shall be provided:<subsection number="13-77-103(3)(a)">verbally at the start of a verbal interaction; and</subsection><subsection number="13-77-103(3)(b)">in writing before the start of a written interaction.</subsection></subsection></section><section number="13-77-104"><histories><history>Enacted by Chapter <modchap sess="2025GS">465</modchap>, 2025 General Session</history><modyear>2025</modyear></histories><catchline>Safe harbor.</catchline><subsection number="13-77-104(1)">A person is not subject to an enforcement action for violating Section <xref depth="3" refnumber="13-77-103">13-77-103</xref> if the person's generative artificial intelligence clearly and conspicuously discloses:<subsection number="13-77-104(1)(a)">at the outset of any interaction with an individual in connection with:<subsection number="13-77-104(1)(a)(i)">a consumer transaction; or</subsection><subsection number="13-77-104(1)(a)(ii)">the provision of regulated services; and</subsection></subsection><subsection number="13-77-104(1)(b)">throughout the interaction that it:<subsection number="13-77-104(1)(b)(i)">is generative artificial intelligence;</subsection><subsection number="13-77-104(1)(b)(ii)">is not human; or</subsection><subsection number="13-77-104(1)(b)(iii)">is an artificial intelligence assistant.</subsection></subsection></subsection><subsection number="13-77-104(2)">In accordance with Title 63G, Chapter 3, Utah Administrative Rulemaking Act, the division in consultation with the office, may make rules specifying forms and methods of disclosure that:<subsection number="13-77-104(2)(a)">satisfy the requirements of Subsection (1); or</subsection><subsection number="13-77-104(2)(b)">do not satisfy the requirements of Subsection (1).</subsection></subsection></section><section number="13-77-105"><histories><history>Enacted by Chapter <modchap sess="2025GS">465</modchap>, 2025 General Session</history><modyear>2025</modyear></histories><catchline>Enforcement.</catchline><subsection number="13-77-105(1)">A violation of this chapter constitutes a violation of Subsection <xref depth="4" refnumber="13-11-4(1)">13-11-4(1)</xref>.</subsection><subsection number="13-77-105(2)">The division shall administer and enforce this chapter in accordance with Chapter 2, Division of Consumer Protection.</subsection><subsection number="13-77-105(3)">The attorney general shall:<subsection number="13-77-105(3)(a)">give legal advice to the division regarding the division's responsibilities under this chapter; and</subsection><subsection number="13-77-105(3)(b)">act as counsel for the division in the exercise of the division's responsibilities under this chapter.</subsection></subsection><subsection number="13-77-105(4)">In addition to the division's enforcement powers under Chapter 2, Division of Consumer Protection:<subsection number="13-77-105(4)(a)">the division director may impose an administrative fine of up to $2,500 for each violation of this chapter; and</subsection><subsection number="13-77-105(4)(b)">the division may bring an action in court to enforce this chapter.</subsection></subsection><subsection number="13-77-105(5)">In an action brought by the division to enforce this chapter, the court may:<subsection number="13-77-105(5)(a)">declare that an act or practice violates this chapter;</subsection><subsection number="13-77-105(5)(b)">issue an injunction for a violation of this chapter;</subsection><subsection number="13-77-105(5)(c)">order disgorgement of money received in violation of this chapter;</subsection><subsection number="13-77-105(5)(d)">order payment of disgorged money to an individual injured by a violation of this chapter;</subsection><subsection number="13-77-105(5)(e)">impose a fine of up to $2,500 for each violation of this chapter; or</subsection><subsection number="13-77-105(5)(f)">award other reasonable and necessary relief.</subsection></subsection><subsection number="13-77-105(6)">If a court of competent jurisdiction grants judgment or injunctive relief to the division, the court shall award the division:<subsection number="13-77-105(6)(a)">reasonable attorney fees;</subsection><subsection number="13-77-105(6)(b)">court costs; and</subsection><subsection number="13-77-105(6)(c)">investigative fees.</subsection></subsection><subsection number="13-77-105(7)"><subsection number="13-77-105(7)(a)">A person who violates an administrative or court order issued for a violation of this chapter is subject to a civil penalty of up to $5,000 for each violation.</subsection><subsection number="13-77-105(7)(b)">The attorney general may impose a civil penalty authorized under this section in any civil action brought on behalf of the division.</subsection></subsection></section><section number="13-77-106"><histories><history>Enacted by Chapter <modchap sess="2025GS">465</modchap>, 2025 General Session</history><modyear>2025</modyear></histories><catchline>Scope.</catchline>This chapter does not displace any other remedy or right authorized under:<subsection number="13-77-106(1)">the laws of this state; or</subsection><subsection number="13-77-106(2)">federal law.</subsection></section></part></chapter>