EffectiveSB 149 (2024)Utah

Utah Artificial Intelligence Policy Act for Financial Services

How Utah Artificial Intelligence Policy Act applies to financial services organizations and the obligations to plan for.

Effective
May 1, 2024
Max penalty
$5K
Applies to
deployer + vendor

Why this law matters for financial services

Banks, lenders, insurers, broker-dealers, and fintech firms using AI for credit decisions, underwriting, fraud detection, and consumer interaction.

This law applies to financial services organizations to the extent their AI use falls within the law's scope (see the obligations below). Organizations operating in Utah should treat this law as part of the baseline regulatory obligations alongside any sector-specific federal rules.

Key obligations

Recommended next steps

  1. Inventory AI systems used in financial services workflows that may fall within Utah Artificial Intelligence Policy Act's scope.
  2. Map each system against the obligations above and identify the responsible role (developer vs deployer).
  3. Adopt a structured framework — see NIST AI RMF and ISO/IEC 42001 — to demonstrate due care and produce audit-ready evidence.
  4. Document obligations satisfied and gaps in a single register, refreshed at the cadence required by the law (typically annual).
Related

We may receive referral commissions from recommended compliance tools. Recommendations are based on product fit and not on commission size. Links marked “partner link” include a tracked redirect.